Your data
Privacy
This site asks people to describe things happening at their homes. That deserves a plain, specific privacy policy rather than a generic one — so here is exactly what happens to what you send.
The short version
Your name, email, phone number and street address are never published, never shown to other visitors, and never included in the data export. Your map pin is deliberately placed 100–200 m away from the location you give. Photos have their metadata stripped in your browser before upload. You can have everything deleted at any time, without giving a reason.
What is collected, and what is published
| Information | Stored? | Published? |
|---|---|---|
| Name, email, phone | Yes, if you provide them — all optional | Never |
| Street address | Yes, if you provide it — optional | Never |
| Exact coordinates | Yes | Never |
| Offset coordinates (100–200 m away) | Yes | Yes — this is what the map shows |
| District and ZIP code | Yes | Yes |
| Issue categories, impact rating, dates | Yes | Yes, after review |
| Your description and notes | Yes | Yes, after review — as you wrote it |
| Photos | Yes, metadata removed | Yes, after review |
Why the map pin is not where you are
A map of exact addresses where people have complained about their neighbours would be a liability for the people on it. So every report is plotted at a random offset of roughly 100 to 200 metres in a random direction from the location you gave. The offset is generated once, when the report is created, and the true coordinates are never sent to anyone's browser.
This is enough to keep the map accurate at the scale that matters — which street, which neighbourhood, which side of a facility — while making it impossible to work back from a pin to a household.
Photos and hidden location data
Phone cameras write GPS coordinates into photo files. Publishing those would undo the offset entirely. Every image you attach is therefore re-encoded in your own browser before it is uploaded, which discards all embedded metadata including location, camera serial numbers and timestamps. The original file never leaves your device.
If your browser cannot read an image — usually a HEIC file on a non-Apple browser — the upload is refused rather than passed through unprocessed. That is deliberate: sending the original would carry its GPS tags with it.
Why contact details are asked for at all
So a moderator can come back to you before publishing — to check a detail, or to ask whether you meant something the way it reads. Every one of those fields is optional and you can submit a complete report without any of them.
The "share my contact details with local community groups" checkbox is off by default and stays off unless you tick it. If it is off, your details are seen only by the people moderating reports.
Where the data lives
Reports are stored in a Postgres database hosted by Supabase, with access controlled by row-level security rules that are part of this project's public source code. Those rules mean an ordinary visitor's browser is technically incapable of reading the private columns — it is not a matter of the site choosing not to show them.
Photos are held in a private storage bucket and served to public pages through short-lived signed links.
If this copy of the site is showing a yellow demo banner, no database is connected at all and anything you submit stays in your own browser's local storage.
What this site does not do
- No analytics, no tracking pixels, no advertising, no third-party scripts.
- No cookies for tracking. Local storage is used only for your theme choice, the submission rate limit, and demo-mode reports.
- Nothing is sold, rented, or shared with data brokers.
- Map tiles are requested from OpenStreetMap, which necessarily sees your IP address — as it does for any site using their tiles. Their privacy policy applies to that.
How long things are kept
Published reports are kept indefinitely — the value of this record is that it builds up over years. Contact details attached to a report are kept while the report is live, and removed if you ask. Rejected reports and their photos are deleted within 90 days.
Your rights
You can, at any time and without giving a reason:
- have your report removed entirely;
- have just your contact details removed, leaving the report published;
- ask for a copy of everything held about you;
- correct anything that is wrong.
Contact us with the reference number shown when you submitted, or with the email address you used. Requests are actioned within 30 days and usually much sooner.
No contact address has been configured for this deployment yet. Set
CONTACT_EMAIL in js/config.js.
Children
This site is not intended for use by children, and reports should not be submitted by anyone under 16.
Changes
If this policy changes in a way that affects reports already submitted, a notice will appear on the site. Because the project's source code is public, the exact rules governing who can read what are always inspectable.