Privacy Policy

1. What we collect

• Report submissions: subject name, subject info, description, location, date/time, optional evidence image, and any reporter contact you choose to provide.
• Operator accounts: email address and authentication metadata provided at sign-up (email/password or Google sign-in).
• Operational logs: minimal server logs necessary to keep the Service secure and available.

2. How we use it

• To review reports and coordinate operator response.
• To authenticate operators and protect the Service from abuse.
• To improve the reliability and quality of the platform.

3. Storage and access

Data is stored in a managed backend protected by row-level security. Report evidence images are stored in a restricted bucket that only authenticated operators can read. Reporter contact fields are optional — you may submit reports anonymously.

4. Sharing

We do not sell personal data. Data may be shared with competent authorities when legally required, or with a subprocessor strictly necessary to run the Service (hosting, database, authentication).

5. Retention

Reports are retained as long as needed to fulfil the operational purpose or as required by applicable law. You may request deletion of a report you submitted via the reclamations page.

6. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of personal data concerning you. Send requests through the reclamations page and include enough information to identify the record.

7. Cookies

The Service uses only the cookies and local storage strictly necessary to keep an operator signed in. No third-party advertising or tracking cookies are used.

8. Security

Authentication, row-level security, and access-controlled storage protect data at rest and in transit. No system is perfect — please report vulnerabilities via the reclamations page.

9. Contact

Data-protection questions: use the reclamations page.