Privacy

The data controller is Humapact (an entity being set up). Its identity is provisional until the entity exists. For any question or request, write to team@humapact.it.

Humapact is a pilot: donations are simulated, so we neither collect nor keep payment data.

If you create an account: the name you choose to show, your email and your password, which we keep only in a form that we cannot read either. For a company we also keep its legal name, its website and its logo.

What you do with the account: your simulated donations (project, amount and date), the projects and organisations you follow, the milestones you reach, your profile's address, your choices on how you appear with the date you give or withdraw a consent, when you opened your notifications and, if you add them, a photo and a bio.

If you report a page: your name, your email, the page, the reason and what you write. A report is never public.

If you apply for an organisation or join one as a member, you find a dedicated notice in the application form and on the welcome page.

Technical data: as on any site, the servers receive the IP address and the browser type of each request. We use no analytics tools and no advertising. The application form for organisations keeps a fingerprint of the sender's IP address, not the address itself, to limit repeated submissions; fingerprints older than a day are deleted at the next submission.

To run your account and show you your donations, your milestones and the news of what you follow: on the basis of the consent you give when you sign up.

To show your name in public, only if you choose it: on the basis of a separate consent, which you can withdraw whenever you like in the settings.

To answer reports and protect the site from abuse: on the basis of our legitimate interest in a fair and safe platform.

No decision about you is made automatically, and your data is never sold or passed on.

You start anonymous. Until you choose otherwise, your donations appear in the lists as “Anonymous”, with their amount, and your profile stays private.

If you choose to show your name, anyone can see it beside your donations and their amounts: among the supporters of projects and organisations, on the project cards, in the recent donations, on the board and on your public profile, which also shows your total, your milestones and, if you add them, your photo and bio. You can go back to anonymous whenever you like in Settings, “How you appear”.

Supabase keeps the database, the sign-ins and the images on servers in Frankfurt, Germany.

Vercel hosts the site and builds the pages in Frankfurt. Its network may handle the IP address and the technical data of a request outside the European Union as well, with the safeguards the GDPR provides for (standard contractual clauses and the Data Privacy Framework).

The maps load their tiles from OpenFreeMap: your browser asks that service for them directly, so it receives your IP address.

No one else receives your data. The Humapact team sees it, to run the platform; organisations see only how many people follow their projects, never who.

We use only technical cookies: to keep you signed in, remember the language and show you the result of an action. They do not track you, so no banner asks for your consent.

Your latest searches among the projects and a few display preferences stay in your browser and never reach our servers.

We keep your account's data for as long as the account exists, and reports until you ask us to delete them. In the pilot nothing expires automatically.

If you ask for deletion, the team removes the account and your personal data within 30 days. Your simulated donations and your milestones go with the account: the projects' totals drop by what you had given. The address your profile had stays reserved for 30 days, with no link to you any more, then becomes available again.

You can ask for a copy of your data or the deletion of your account in Settings, “Your data”: we answer by email within 30 days. To correct a piece of data, restrict its use, object to a use or withdraw a consent, write to team@humapact.it.

If you think your data is handled wrongly, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).