Privacy Policy
Last updated
What we collect
When you register interest in the planned working room at /open-cohort, we collect your email address, optional planning answers, and the consent you give us to contact you. Existing account holders may also have a name, GitHub username, and content they previously created. We do not sell your data.
How we use it
We use cohort form answers only to plan sessions and send session updates. Map search text may be processed to interpret what you want to find or make. To learn what people look for and cannot find, we keep a typed reading of each Map search, whether you press Enter or just type and pause (its categories plus any of your words that already appear on the site; never your IP address or a cookie), for 30 days. When a search finds nothing, we also keep its words with every number, email address, link, and @handle removed, so we can see what is missing; we never keep the full text of a search that found results. A Global Privacy Control or Do Not Track signal, or declining analytics on this site, turns this off. When you follow a listing's apply or source link, we add one to that listing's daily click total; to count each visitor once, our rate limiter briefly keeps a one-way keyed hash of your connection, never the address itself. If you save a search or turn on alerts, we store the search and your alert choices with your account and email you new matches; every alert email has a one-click unsubscribe link. Existing account data continues to support the account features its owner chose to use.
What is public
Cohort submissions are not public. For existing accounts, profile and project visibility continues to follow the setting previously selected by the account owner.
Third parties
TypeSafe processes ordinary-language Map searches and requests to the Project Field API. Google Gemini processes files a person explicitly uploads for extraction. GitHub supports an owner-authorized, one-time profile and repository metadata import. The configured SMTP provider delivers email, Vercel hosts the site, and Firebase provides authentication and data storage. Vercel Web Analytics counts page views without cookies; it receives only the page path and campaign tags, and it is off for anyone who declines analytics or sends a Global Privacy Control or Do Not Track signal. We do not send these providers data for advertising.
Unsubscribing and deletion
Every cohort email includes a removal link. Removing cohort interest deletes the email address, optional answers, and consent fields from the interest record while retaining an opaque suppression record. Existing account holders can request account deletion from Settings > Danger Zone. If a shared Project still uses the account as its storage home, deletion pauses rather than erasing another owner's work.
Contact
Questions: hi@buffaloprojects.com