Privacy

What we collect

• Email account: your email address (stored in lower case), a salted scrypt hash of your password (never the password itself), your language preference and the time your email was verified.
• Google sign-in: Google's identifier for your account and the verified email address Google returns. We ask Google for the openid, email and profile scopes but keep only the identifier and the email; no name, picture or access token is stored.
• Saved centres: the centres you add to your favourites, linked to your account.
• Session data: a random session identifier (stored only as a hash) with a security token against forged requests. Every visitor gets one, signed in or not.
• Sign-in and verification records: for a registration code or password reset, your email address, a keyed hash of the code, an expiry time (10 minutes) and a count of attempts. Rate-limit counters use keyed hashes of your IP address and email address and are not readable as such.
• Correction reports: the text you type, the centre it refers to and the time. A report is not linked to an account or to your IP address. Please do not put personal information in it.
• Location: only if you press the location button. Your browser asks for permission first. See "Location" below.

Why we use it

• To create and secure your account, sign you in and keep your saved centres.
• To send you the verification code or password reset link you asked for. We do not send marketing email.
• To limit abuse such as repeated sign-in or code requests.
• To count visits and see which pages are useful, only if visit statistics are enabled on this site. They run by default unless you opt out.

Location

If you press the location button, your browser shares your position with this page. The position is kept in your browser tab (see the storage table below). On the directory list the coordinates are added to the page address and sent to this site's server so that centres can be sorted by distance; the application does not store them. Web servers and hosting providers may record page addresses in their own access logs, which the application does not control.

Who else handles data

• Mail delivery: the operator uses a mail-delivery system (Postal, through a mail workbench) to send verification and reset emails. It receives the recipient address and the code or reset link. It also receives short account event notices (for example "registration completed") that carry a random internal account ID and a time, but no email address.
• Google: if you choose Google sign-in, Google handles your sign-in under its own terms. If visit statistics are enabled and you have not opted out, Google Analytics receives the page address without query string, the page title, your language and the usual technical data a browser sends.
• OpenStreetMap: the map is optional. When you press "Load map", your browser requests the map from openstreetmap.org, which then sees your IP address and the requested area.
• Site Observer: receives non-personal daily totals (for example how many accounts exist and how many registered that day). It never receives email addresses or account IDs.

Analytics

If visit statistics are enabled on this site, it uses Google Analytics to count visits and see which pages are useful. By visiting and using this site you agree to the use of the Google Analytics cookies described in the cookie table below (_ga and _ga_*): they are set by default unless you opt out, they count visits and recognise a returning browser, and Google keeps them for a period set by Google (typically up to two years). Google Analytics receives the page address without query string, the page title, your language and the usual technical data a browser sends.

You can opt out at any time with the button below. It stores your choice in a first-party cookie for 365 days, stops all requests to Google Analytics from this browser and removes the analytics cookies. You can also install Google's opt-out browser add-on. The operator of this site can change how visit statistics work, for example by asking for your consent first, and will update this policy when that happens.

Cookies and browser storage

The table lists every cookie and storage key the site sets itself. When visit statistics are enabled, the Google Analytics cookies are set by default unless you opt out. You can opt out, or allow analytics again, at any time in the Analytics section of this page.

How long we keep data

• Account data (email, password hash, Google identifier, language, saved centres): until you delete your account.
• Sessions last 24 hours. Expired sessions, expired sign-in attempts and rate-limit counters are removed by a cleanup that runs when the service starts and whenever a verification code is requested, so on a very quiet site a record can remain a little longer.
• Verification and reset records are valid for 10 minutes and are removed by the same cleanup within about 24 hours after they expire. Code emails that could not be delivered are discarded after 10 minutes; a send that fails permanently is wiped of its recipient and content at once.
• Account event notices hold a random account ID, an event type and a time, no email address. They are not removed when an account is deleted.
• Correction reports are not deleted automatically. To have one removed, use the contact page.
• Google keeps analytics data according to its own settings, which the operator configures in Google, not on this site.
• Backups and web-server logs, if the operator keeps any, are outside this application's control and may hold data for longer.

Your choices and rights

• Delete your account: sign in, open "My" and use "Delete my account". This removes your account, sign-in sessions on all devices, saved centres, Google link, and any verification or reset records and unsent emails that hold your address.
• Anything else, such as asking what we hold about you, a correction, or removal of a report you sent: use the contact page. There is no self-service data export yet.
• Visit statistics: opt out, or allow them again, in the Analytics section of this page.
• Location: close the tab to forget the starting point, or deny the browser prompt.
• Google: you can manage your Google account and its sign-in connections in your Google settings.
• Depending on where you live, you may have further rights under local law. We do not claim compliance with any specific law in this text.

Contact us

International transfers

Google and the mail-delivery provider may process data on servers in other countries. We do not control where they do so. Data sent to Google, through sign-in or accepted analytics, is handled under Google's own terms.

Children

This site is not aimed at children and we do not knowingly collect children's personal data. If you believe a child has created an account, tell us through the contact page.

Changes

We may update this policy when the site changes. The "Last updated" date above shows the current version.