◈ JOBS & CAREER OPPORTUNITIESOpportunity Lantern — Find Your Next Opportunity.

OPPORTUNITY LANTERN

Privacy Policy

Updated October 20, 2026 · Applies to Opportunity Lantern

Your résumé stays in this browser. Employer submissions go to a private shared review queue. These pages describe the current Opportunity Lantern service.

Reading settings apply to this browser.

About this policy

Opportunity Lantern — Find Your Next Opportunity is a jobs and career navigation service starting in the Twin Cities. This policy covers the features on this website, including job discovery, Job Fairs, the résumé builder, and the employer listing form.

Vacancies and events include official source links and a source-check date; availability can change. This policy describes the current service; it does not replace the privacy policies of employers, CareerForce, or the hosting and sign-in providers.

Information used by the service

Saved jobs and reading preferences
Saved OL Job IDs and choices such as text size, contrast, motion, navigation language, and colors are stored in this browser to remember your choices. Local review flags store the item ID and time you flagged it.
Résumé details
The builder displays the contact details, summary, skills, work history, education, and other information you enter. Its code processes these details in the browser. Save Draft explicitly stores an editable copy and save time in this browser. The builder does not send your résumé to Opportunity Lantern, an employer, or an AI service.
Employer drafts and submissions
The List a Job form uses employer identity, website, work contact details, job information, and the authorization checkbox. Save Draft stores a draft locally. Submit for Review sends the form details, a submission reference, submission time, and pending status to a shared server database. No employer account is created or required. The confirmation gives you a submission reference and received time; only the administrator can retrieve full submissions in the private review queue. Earlier preview submissions may retain the account ID recorded when they were submitted. Review decisions, time, reviewer ID, and optional notes are also stored. Only approved job details appear in search; contact names and email addresses are excluded. A new submission sends the administrator a reference and private review link through Resend. Employer contact details are not included in the alert. The server records when the provider accepts it. A retry of the same submission can retry an unconfirmed alert; no delivery guarantee is made. To limit spam, the form uses a hidden empty field, shared request counters, and a coded identifier derived from your work email. These counters do not store your IP address or the email itself. Counter records are cleaned up after two days on later form submissions.
Outbound referral clicks
When you choose Continue to official application, the browser records a referral event, OL Job ID, employer, destination, time, and a prototype environment marker and whether the listing is a sample. These records support your local Referral activity view and CSV export. New clicks also send the OL Job ID and a random reference for that individual click to the shared server. The server records the public job title, employer, application site domain, activity mode (private preview or live), and Central-Time date received. URL paths, query parameters and fragments are excluded from shared reporting. It uses the click reference to prevent a delivery retry from counting twice. Shared administrator reports aggregate these records across devices. The reporting database does not store names, work contacts, résumés, account IDs, IP addresses, user agents, or a persistent visitor identifier. Neither report counts unique people or confirms an application or hire. Browser or network blocking may leave clicks unrecorded; automated clicks may be included. Older browser-only history is not uploaded.

Résumé content, saved jobs, drafts, preferences, flags, and referral records are browser-local and do not sync across devices. The administrator can view shared referral reports across devices. Employer submissions use the shared database. Keep the receipt reference for questions about your listing; it does not provide access to the queue. Search and filters run in the browser. No applicant hiring profile or automated hiring decision is created.

Hosting, sign-in, and security

Sites provides hosting. Browsing is public; administrator functions require a separate password-protected session. Hosting and sign-in services may process account and technical information, including request logs and authentication data, and may use cookies or similar technologies to operate and secure their services. Browser-local feature storage does not mean that no hosting or sign-in information is processed.

See OpenAI’s Privacy Policy (opens in a new tab) for its practices and account privacy controls. Provider retention and account-data handling are separate from the browser records and shared employer records described here. The initial administrator setup is restricted to the verified site owner using a Site-specific account ID. The separate Opportunity Lantern administrator account stores the chosen email, a salted password hash, account creation time, and administrator ID in the server database. Administrator sessions store a session token, expiry, account ID, timestamps, and browser user agent. Secure, HttpOnly cookies maintain the administrator session; sessions expire after eight hours and Sign Out revokes the current session. A shared attempt counter limits administrator sign-in attempts. Passwords are not stored in plaintext or in browser feature storage. Administrator account and access-control records remain until the operator removes them; there is no automatic account-retention schedule. Password recovery is connected. A recovery request uses your administrator email and sends a single-use link through Resend. The server stores only a hash of the recovery token, its account association, password version, creation time, and 15-minute expiry. Completing a reset removes all outstanding reset records and revokes existing administrator sessions; expired hashes are cleaned up on later requests. A safe delivery status and time are stored for the administrator. Resend receives the recipient email and message, including the reset link, to process delivery. Provider acceptance does not prove inbox delivery.

Browser storage is not a private vault. Other people with access to the same browser profile or device may be able to view saved details. Use a device you trust, and clear the résumé or site data when you no longer want it stored there. No security method can guarantee complete protection.

Retention and your controls

Browser records generally remain until you remove them, clear this site’s browser data, or the browser removes them. Browser-local records have no automatic retention period. Unapproved employer submissions are removed after 180 days. Approved submissions with a stated closing date are removed 90 days after that date. Cleanup runs on later submission or queue activity, so inactive records may remain longer. Approved listings without a closing date remain until the administrator removes them. Hiding a newly expired listing does not immediately erase its separate record. Removing a submission does not erase its separate historical referral statistics, which exclude private work contacts. Shared referral click records are kept for the most recent 90 Central-Time calendar days; older records are deleted on the next click-collection or report request. Downloaded report CSV files are separate copies you control.

  • Saved jobs: use the heart control again to remove a saved job.
  • Résumé draft: use Clear Résumé and confirm. This clears the current résumé and removes its saved draft from this browser.
  • Referral activity: open Referral activity, export the CSV if you want a copy, then choose Clear local activity and confirm. This does not erase the separate shared referral statistics.
  • All browser records: clear this site’s data in your browser settings. This also removes local employer drafts and older browser-only test queue entries, flags, saved jobs, and reading preferences, and may reset sign-in state. It does not remove shared submissions.
  • Shared employer submission: the administrator signs in with the Opportunity Lantern administrator account, opens Review Queue, chooses its details, then selects Remove Submission and confirms. For a preview removal request, give the person who provided your access the submission reference. This deletes its form details and private contact information and removes any approved job card. Browser drafts and provider-held logs are separate.

Clearing site data does not delete downloaded files, printed copies, information you gave an employer, or provider-held account and technical records. Manage those copies with the relevant device, employer, or provider. We cannot remotely recover or erase a draft that exists only in your browser.

Questions and changes

Use the Contact / Report a problem form for listing problems, privacy or removal requests, and questions. It stores your email, topic, reference, message and received time in the private administrator inbox. Messages are retained for up to 180 days, with cleanup when the support inbox is used. The administrator can remove a message earlier. Messages are not sent to employers or published. No response time is guaranteed. For hosting or sign-in account requests, use the privacy controls and contact options in the provider’s policy.

Opportunity Lantern handles service questions and privacy requests through the Contact / Report a problem form linked above.

Changes to storage, employer submission delivery, analytics, AI features, or other integrations will require an updated notice. The update date at the top identifies this version.