Privacy

Last updated 28 October 2026. Operated by Sushmit Sarmah.

Short version

No accounts, no cookies, no analytics, no ads, and we never ask you to sign a message. What we keep is what a paid brief needs: your payment transaction, the paying wallet address and the area you chose. All of that is public on the blockchain or in the brief anyway.

What we store

• Brief requests: the payment transaction ID, the paying wallet address (read from that public transaction), the amount, the area (box or shape), the name you typed, and the time. Used to build the brief, to show "Your briefs", and to refund failed briefs.
• Brief results and refunds: the brief file, its hash, the anchor transaction, and any refund transaction.
• Watchlist: if you tick "alert me", the area is watched for 30 days and alerts are published on the public alert feed. Alerts do not contain your wallet address.

These records are kept in Cloudflare R2 storage for as long as the service runs, because briefs are meant to stay verifiable. Anything on the Celo blockchain (payments, anchors, refunds) is public and permanent and cannot be deleted by anyone.

What is public

Briefs, their hashes and the source data slices are public by design so that anyone can check them. A brief shows the area and the name you typed, not your wallet. Anyone who knows a payment transaction ID can look up its brief.

Who else sees data

• Cloudflare hosts the app and its API and processes standard request data (such as IP address) to deliver and protect it. We do not keep request logs.
• Celo RPC nodes (Forno) receive the transactions your wallet sends.
• OpenStreetMap serves the map tiles on the Map tab, so its tile servers see your IP address and the map area you view (their privacy policy).
• When you open a report, your browser downloads the report file and its archived source slices from Tidewatch's data service (or a public IPFS gateway, if the report points there) to check their hashes.
• To build a brief the agent requests public data for the area's coordinates from Tidewatch's data service (NOAA Coral Reef Watch, University of Maryland forest change, University of Hawaii Sea Level Center) and may search public Reddit posts for the area name through a paid data gateway (usebuy.ai). Your wallet address is not sent to any of them.

On this device

The app keeps the ID of your last brief in your browser's local storage so it can reopen it. Clearing site data removes it.

Your choices

You can ask us to remove the name you typed from our copy of a request (see Support); anchored brief files cannot be altered without breaking their hash, so we would stop serving that file instead.