Privacy Policy

1. Who we are

This Privacy Policy covers EG-Maps, the interactive data-visualization platform operated by Earth Guardians (earthguardians.org), including the public maps (project grants, endangered species, active crews, Vulcan observatory) and the restricted EG-Grants portal that requires Google sign-in.

2. Google user data we access

When you sign in with Google, we request only the minimum OAuth scopes needed for authentication — openid, email, and profile. Through these scopes Google shares with us:

• Your name (to identify you in the app)
• Your email address (to verify Earth Guardians staff access and attribute your contributions)
• Your Google profile picture (displayed next to your contributions, if you contribute)

We do not request access to your Gmail, Google Drive, contacts, calendar, or any other Google service.

3. How we use Google user data

We use your Google account information solely to provide, operate, and improve EG-Maps:

• Authenticating you and keeping you signed in
• Determining whether your account is authorized for restricted areas (e.g. Earth Guardians staff access to EG-Grants)
• Attributing content you create (grant submissions, votes, comments) to you inside the app
• Preventing abuse and keeping the platform secure

We do not use Google user data for advertising, profiling, or any purpose unrelated to providing and improving EG-Maps functionality.

4. Sharing and disclosure

We do not sell, rent, or transfer your Google user data to third parties, except to the service providers strictly necessary to operate the app:

• Supabase — our authentication and database backend, which stores your account record and app content
• Google — the OAuth provider that authenticates you
• MapTiler — map tile provider (receives no account data, only map-tile requests)

We will disclose data only if required by law or to protect the safety and integrity of the platform. We never transfer Google user data to third parties for purposes other than providing or improving EG-Maps functionality.

5. Data protection

• All traffic is encrypted in transit (HTTPS/TLS)
• Account and content data is stored encrypted at rest by our backend provider
• Database access is restricted by row-level security rules and least-privilege credentials
• Restricted areas (EG-Grants) are additionally gated by server-verified staff checks

6. Cookies and local storage

EG-Maps stores small amounts of data in your browser to function:

• Authentication session and login-security tokens (required for sign-in)
• Preferences such as theme (dark/light) and language

Clearing your browser storage will sign you out and reset these preferences.

7. Data retention and deletion

We retain your account data for as long as your account is active or as needed to provide the service. You may request export or deletion of your personal data at any time by emailing privacy@earthguardians.org — we will respond within 30 days.

You can also revoke EG-Maps' access to your Google account at any time from your Google Account third-party access settings; revoking access signs you out and prevents further data collection, though content you already published (e.g. comments) may remain until you request its deletion.

8. Children's privacy

EG-Maps is not directed at children under 13, and we do not knowingly collect personal data from children. Accounts for youth crew members are managed through a parent, guardian, or crew coordinator.

9. Changes to this policy

If we change how we use Google user data, we will update this page, revise the date above, and notify signed-in users in the app before the changes take effect.

10. Contact

Questions about this policy: privacy@earthguardians.org
Earth Guardians · PO Box 1561, Laurel, MD 20725