Privacy notice

1. What we store

For a registered department: the chosen address (slug), your Supabase project URL, its public anon key, the display name, and whether it is listed.

For an OpenDepartment account: your e-mail address and password hash, handled by Supabase Auth.

We also store submitted abuse reports and any contact details you choose to include. We do not request a service_role key. To render pages, our server processes member sessions, authorized metadata and temporary file links. Optional Supabase connection temporarily uses an encrypted Management API token.

2. What we do not store

No uploaded files, no comments, no votes, no member accounts of your department, and none of your members' e-mail addresses. All of that sits only in your own Supabase project.

Your members' data is covered by whatever privacy notice you, as your department's operator, are responsible for.

3. Cookies

Cookies keep your OpenDepartment account session, chosen language, chosen light or dark mode and dismissed notice. Optional Supabase setup also uses short-lived cookies for its connection flow and an encrypted, account-bound Management API token.

The app includes Vercel Analytics for traffic statistics; that script sets no cookies. The homepage carries an ordinary link to Ko-fi – no script and no widget from them, and your browser only reaches Ko-fi if you follow the link. A department you visit sets its own session cookie, scoped to that department's URL path.

4. Your rights

You can remove a listing that is not suspended. This does not delete your platform account or stored abuse reports. For access or deletion requests, write to the address below.

notausgang09@gmail.com