Privacy Policy
For the site administrator: this is a generic template shipped with the software. Review it and change it to describe what your own site collects, why, and who to contact, and to fit the law that applies to you, before you rely on it. It is not legal advice. When you change what people agree to, raise version: in this page's front matter (Admin → Edit raw) so everyone is asked to accept the new version at their next sign-in.
This policy says what information GeoHazardWatch keeps about you, why, and for how long. For a live view of what the site holds about your current visit, see Everything We Know About You.
What we keep
- Your account: your username, display name, email address, the roles you hold, and when the account was made.
- How you sign in: your password is stored only as a one-way hash, never as itself. Passkeys and other sign-in methods are stored the same way: what is needed to check them, not secrets that could be used elsewhere.
- Your settings: the preferences you choose on your profile, such as theme, language, time zone and date format.
- What you make: the pages, files and comments you create, and their history.
- Sign-in records: each sign-in, sign-out and failed sign-in, with the time, your network (IP) address and your browser's description. See below.
- Your consents: which version of these documents you accepted, and when.
- Sessions: a cookie that keeps you signed in. It ends when you sign out or after a period of inactivity.
Why we keep it
- To give you your account and the pages and files in it.
- To keep the site and your account secure: to spot and investigate misuse, such as someone trying to guess passwords.
- To show you your own settings.
- To prove what you agreed to, and when.
We do not sell your information, and we do not use it for advertising.
Sign-in records and the audit log
Every sign-in, sign-out and failed sign-in is recorded in the site's audit log with the time, your network (IP) address and your browser's description. Changes to your account and to the site's settings are recorded there too. This is kept for security for 90 days, and then deleted. It is needed to run the site safely, so it cannot be turned off for one account.
Who can see it
- You can see and change your own account information and settings on your profile.
- The site's administrators can see account information and the audit log, to run and secure the site.
- Content you share or make public can be seen by the people you share it with, or by anyone.
- Apps you approve can see only what you approved them to see. You can revoke them on your profile.
How long we keep it
- Your account and what you made: for as long as the account exists.
- Sign-in records and other audit records: 90 days.
- Backups: copies of the site, kept by the administrator for a limited time.
When your account is deleted, your account information and your record of consents go with it. Audit records remain until their retention period ends.
Your choices
- See and change your information on your profile.
- See what you have accepted, and when, under Your consents on your profile.
- To have your account deleted, ask the site administrator.
Changes to this policy
When this policy changes in a way that matters, its version goes up and you are asked to accept the new version the next time you sign in.
Questions about your information go to the site administrator.