Privacy Policy

1. Data we collect

Information you provide

• Account information: Email address (if you create an account). You may also report anonymously.
• Reports: Category, description, severity ratings, and photos/videos you attach.
• Votes: Upvotes and confirmations on community reports.
• Feedback: Messages submitted via the feedback form.

Information collected automatically

• Location: GPS coordinates when you submit a report. We only access location during active reporting or when you opt into proximity alerts.
• Device info: Device model, OS version, and app version for crash reporting and compatibility.
• Analytics: Anonymous, aggregate usage via Google Analytics with IP anonymization enabled.

Information we do NOT collect

• We do not track your location in the background without explicit opt-in.
• We do not sell your personal data to third parties.
• We do not collect contacts, browsing history, or data from other apps.
• We do not store passwords — we use magic-link authentication.
• We do not use behavioral or personalized advertising.

2. How we use your data

• Reports: To document issues, identify responsible authorities, and escalate confirmed problems.
• Community verification: To aggregate reports and confirm real issues.
• Authority escalation: Aggregated, anonymized report data is shared with authorities. Your name and email are never included.
• Legal tools: Demand letters and insurance packages are generated locally and shared only when you choose.
• Analytics: Aggregate data powers infrastructure health scores and public dashboards.
• Crash reporting: Anonymized crash data via Sentry for bug fixes.
• Ads: Banner advertisements via Google AdMob / AdSense. No personalized ads.

3. Data sharing

We share data only in these circumstances:

• Government authorities: Aggregated, anonymized report data during escalation. Your identity is never included.
• Public dashboards: Infrastructure health scores and aggregate statistics. No individual user data exposed.
• Crash reporting: Anonymized crash data with Sentry.
• Ad networks: Standard ad requests to Google AdMob/AdSense. No personal data shared.
• Legal: If required by law or to protect safety.

We never sell your personal data.

4. Cookies

We use essential, httpOnly, same-site cookies for authentication session management. We use Google Analytics with IP anonymization for aggregate usage data. No third-party tracking cookies.

5. Data storage & security

• Data is stored on Supabase (hosted on AWS) with encryption at rest and in transit.
• Row-level security ensures users can only modify their own data.
• Server-side rate limiting protects against abuse.
• CSP nonces, CSRF guards, and httpOnly cookies protect the web app.

6. Anonymous reports

You can submit reports without creating an account. Anonymous reports are never linked to any user profile — not even in our database.

7. Your rights

• Access: View all your reports and profile data in the app.
• Delete: Request deletion of your account and all associated data.
• Anonymous reporting: Use the app without creating an account.
• Opt-out: Deny tracking prompts. Disable proximity alerts in settings.
• Data portability: Request an export of your data.

8. Children's privacy

Fault Line is not directed at children under 13. We do not knowingly collect data from children.

9. Changes

We may update this policy. Changes will be posted in the app and on this page.

10. Contact

For privacy questions or data deletion requests:
moonlit-social-labs@proton.me
Michael Wylde · Moonlit Social Labs