Privacy Policy

1. Who controls your data

Changemappers is controlled by Incze Gaspar, an individual based in Hungary. Changemappers is not presently a company, foundation, association, or other incorporated organization. For privacy questions, requests, or concerns, contact [email protected].

2. Our privacy approach

Changemappers is designed as a privacy-first community platform. We collect only the data needed to provide accounts, community features, safety controls, and service reliability. We do not sell personal data, run advertising profiles, or use third-party marketing trackers.

3. Data we collect

• Account data: Your email address, display name, authentication details, and basic profile information.
• Profile and community data: Information you choose to add, such as location, skills, values, interests, intentions, availability, and community participation.
• Matching activation data: Roles/archetypes, offers, needs or learning edges, cause or RDG focus, availability mode, and intent or boundary flags used to produce relevant recommendations.
• User content: Posts, comments, messages, events, maps, canvas entries, feedback, and other content you create or submit.
• Preference data: Privacy settings, consent choices, communication preferences, and feature-specific controls.
• Technical data: IP addresses, browser type, device information, security logs, and usage events needed to keep the service stable and safe.

4. Cookies and local storage

We use essential cookies and local storage only when they are needed for login sessions, security, preferences, and core application behavior. We do not use marketing cookies or cross-site tracking cookies.

5. Why we use your data

We use personal data to create and manage accounts, provide community and collaboration features, generate explainable matching recommendations, apply privacy and safety settings, prevent abuse, respond to support requests, and improve reliability. Depending on the context, our legal bases include your consent, performance of the service agreement, legitimate interests in security and platform operation, and legal obligations.

6. Hosting and processors

Current processors and infrastructure providers include Hetzner for hosting and server infrastructure, Sentry for error reporting and application monitoring, Brevo for transactional email delivery, and Cloudflare for DNS, security, caching, and network protection. These providers process data only for the purposes needed to operate, secure, monitor, and communicate about the service.

7. Sharing and disclosure

We do not sell your personal data. We share data only when required to provide the service, comply with the law, protect users or the platform, or honor your own visibility choices. Public content and public profile fields may be visible to other users or visitors according to the settings you choose. Matching activation data is used to rank and explain recommendations, but sensitive boundary flags are not displayed casually as profile content.

8. Public contributions and open data

Some areas of Changemappers are designed for public-interest learning and mapping. If you choose to make a contribution public, it may be displayed publicly and may be included in aggregated or open datasets for social-impact purposes. We avoid including private account data in those datasets only when you have clearly chosen public visibility for that data.

9. Retention

We keep personal data while your account is active or while it is needed for the purposes described in this policy. Security and technical logs are deleted or anonymized after 90 days. A longer period may be used to investigate abuse, protect the service, or meet a legal requirement.

10. Account deletion

You can request account deletion at any time. Deletion removes or anonymizes personal data from active systems, subject to limited retention for security, legal compliance, backups, or records that must be preserved in a non-identifying form to maintain community integrity.

11. Your GDPR rights

If GDPR applies to you, you may have the right to access your data, correct inaccurate data, delete data, restrict or object to processing, withdraw consent, and receive a copy of your data in a portable format. You may also lodge a complaint with your local data protection authority.

12. Security

We use TLS encryption, access controls, secure authentication practices, monitoring, and other technical and organizational measures to protect personal data. No online service can guarantee perfect security, but we work to reduce risk and respond quickly when issues are found.

13. Data breaches

If a personal-data breach creates a high risk to your rights or freedoms, we will notify affected users and relevant authorities as required by law, including the 72-hour GDPR notification window when GDPR requires it.

14. Children

Changemappers is not intended for children under 16. If you believe a child has provided personal data to us, contact us so we can review and remove it.

15. Changes to this policy

We may update this policy as Changemappers changes. When changes are material, we will notify users by email, in-product notice, or a clear notice on the website.