Privacy policy

What we never keep

• Your email address. It is used once to send your sign-in code and is not stored. Your account is found by a one-way scrambled code (a keyed hash) that we cannot turn back into your address.
• Your internet (IP) address. It is not written to our database or to any log of ours.
• Where you or your device are. If you tap “I see it too” or “It's over”, your position is sent, compared with the report once, and discarded.
• Photos. The site does not accept them.
• Visitor logs, analytics, advertising or tracking cookies. Our request logging is switched off.

What we do keep

• An account: the scrambled code that stands for your email, a display name (a random “Neighbor” name until you change it), your role, and the date it was created.
• A sign-in cookie on your device so you stay signed in for up to 30 days. We store only a scrambled copy of it.
• Each report: the place where the pin was put, the kind of activity, the time, and any details you ticked (number of vehicles, marked or not, direction). There is no text box. These are public.
• Which account sent a report, for 7 days. This is what makes “one report per person”, editing or deleting your own report, and earned trust work. After 7 days that link is erased by a timer that runs every hour.
• A count of how many of your reports were confirmed or removed as false. After 7 days it no longer says which reports.
• If you turn on notifications: your device's notification address at Google, Apple or Mozilla. It is not linked to an account, and no area is stored.
• Counters that limit abuse (for example, how many sign-in codes were requested). They are filed under a scrambled stand-in for “this network, today” that changes daily, and are deleted after a day.
• A log of moderator actions (which report was removed, ended or restored, and by which moderator account).

What no website can hide

• Reports are public. Anyone, including government agencies, can read the map.
• A report shows that someone was near that place at that time. For 7 days our database also shows which account that was.
• Cloudflare, the company whose network delivers this site, necessarily sees your internet address and the pages you request. We have switched off the logs we control, but Cloudflare operates under its own policies.
• OpenStreetMap supplies the map pictures and the address search. Your browser fetches them directly, so OpenStreetMap sees your internet address, which parts of the map you look at, and any address you search for.
• Your sign-in code arrives by email, so your email provider (and anyone who can read your inbox) can see that you received a message from Ayuda CV. Consider using an email account that does not identify you.
• Notifications are delivered by Google, Apple or Mozilla. The notification carries no content, but that company knows your device is subscribed to this site.
• A tool such as a VPN or the Tor Browser hides your internet address from all of the above. We do not block them.

If someone demands our records

We can only hand over what we have, and what we have is the list under “What we do keep”. We cannot produce email addresses, internet addresses, device locations or photos, because we do not hold them. This is a description of how the site is built, not legal advice or a guarantee about any legal process.

Your choices

• On the My account page you can change your display name, edit the details on a report, or delete a report.
• You can turn notifications off on the Alerts screen at any time.
• You can look at the map, search and filter without an account.
• You can delete your account at any time on the My account page. It takes effect at once. Your reports stay on the map as anonymous sightings with no link to you.

Changes

If the site ever starts keeping anything not listed here, this page will be changed first, and the date at the top will change with it.

Contact

A contact email address will be listed here before the site opens to the public.