Greenflow Privacy Policy

1. Who looks after your information

Greenflow is operated by:

The Foundation is the data controller for personal information where Greenflow determines how and why it is processed.

Questions or privacy requests can be sent to the contact above.

2. What we collect

What we know about you depends on how you use Greenflow.

Account and profile

When you register, we collect your name, email address and password. If you choose, you may also add profile information, status updates, photographs, avatars or other media.

We also store your notification preferences and information connecting you with Areas, Projects or Quests you participate in or manage.

Areas, Projects and Quests

These may contain creator and administrator names, backstories, updates, media, progress information, events, streams and other information contributors choose to provide. Public content can be seen by others.

Communication

Greenflow processes public comments and replies as well as direct messages. Direct messages are not public, although their recipients can see and retain them.

Donations

Payments are processed through Stripe. Greenflow stores the donor's name and email address, donation amount and associated Stripe transaction or subscription identifier.

Greenflow does not store your full payment-card details.

Donation records may also contain the Project or Quest supported and choices such as whether the donation should appear anonymously.

Location

Greenflow does not automatically track your precise or live location. Location information connected with Areas, Projects or Quests is provided voluntarily.

Technical information

We process basic technical and account-activity information needed to operate, protect and troubleshoot Greenflow. With your consent where required, Google Analytics may also collect information about how the website is used.

3. Why we use it

We use personal information to:

• create and operate accounts;
• provide profiles, Areas, Projects and Quests;
• enable comments and direct communication;
• process and record donations;
• provide notifications and requested emails;
• understand and improve Greenflow where analytics consent has been given;
• protect accounts, prevent fraud and keep Greenflow secure;
• respond to questions and complaints; and
• meet legal, accounting and organisational responsibilities.

Under European data protection law, our legal basis depends on what we are doing. It may be necessary to provide a service you requested, comply with a legal obligation, pursue a legitimate interest in responsibly operating and protecting Greenflow, or act on your consent.

Where we rely on consent, you can withdraw it.

4. What's public — and what isn't

Greenflow is partly a public platform.

Information you deliberately publish through public profiles, Areas, Projects, Quests, comments and updates can be seen and shared by others.

Direct messages are treated as private communications.

If you donate anonymously, Greenflow and Stripe may still need to know who made the donation.

So anonymous means not publicly identified — not unknown to Greenflow or its payment provider.

5. Who else receives information

We do not sell your personal information.

Where necessary to operate Greenflow, information may be processed or received by:

• Stripe for donations and payments;
• Google Cloud Platform, which hosts Greenflow in London, United Kingdom;
• Google Analytics, where you have consented to analytics;
• services used to provide email and technical infrastructure;
• relevant Project or Area administrators;
• professional advisers or public authorities where necessary or legally required; and
• other users or the public when you choose to publish information publicly.

Greenflow may also contain user-submitted YouTube, Vimeo or other embedded media. Loading or playing this content can result in information being sent to those providers.

Where consent is legally required for non-essential third-party technology, we will ask for it.

6. Cookies and analytics

Greenflow uses technology necessary to make the website work.

We also use Google Analytics 4 (GA4) to understand how Greenflow is used and performs.

Analytics cookies are optional. Where consent is required, our Cookie Settings will allow you to accept or decline them and change your choice later.

Third-party embedded media may also communicate with its provider when loaded or played.

Details of individual cookies, providers and duration will be available through Cookie Settings.

7. How long we keep information

We keep personal information only for as long as reasonably necessary.

Account information, activity records and notification preferences are generally kept while your account is active.

Donation and transaction records are retained for the period required by applicable accounting, audit, fraud-prevention and legal obligations.

[INSERT RETENTION PERIODS FOR INACTIVE ACCOUNTS AND SUPPORT REQUESTS.]

We don't keep identifiable personal information indefinitely simply because it might someday be useful.

8. Deleting your account

You can request deletion of your Greenflow account.

When it is deleted, direct messages and personal notification settings tied to your account are removed.

Public contributions such as comments, Project updates and backstories may remain so that Projects and conversations still make sense, but your author identity will be removed and displayed as "Anonymous User."

Some records may still need to be retained for legal, accounting, fraud-prevention or dispute purposes.

9. Where your information goes

Greenflow is hosted through Google Cloud Platform in London, United Kingdom.

The UK is currently recognised by the European Commission as providing an adequate level of data protection for GDPR transfers.

Other providers may process information in other countries. Where additional legal safeguards are required for an international transfer, Greenflow will use an appropriate lawful mechanism.

We also take reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access or disclosure.

No online service can promise absolute security, but protecting information entrusted to Greenflow is part of our responsibility.

10. Your rights

European data protection law gives you rights over your personal information.

Depending on the circumstances, you may be able to:

• access information we hold about you;
• correct inaccurate information;
• ask us to delete information;
• restrict or object to certain uses;
• receive certain information in a portable format; and
• withdraw consent where processing depends on it.

These rights aren't absolute in every situation. For example, Greenflow may be legally required to retain certain financial records.

To exercise a privacy right, contact [PRIVACY EMAIL]. We may need to verify your identity first.

You can also lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.

11. Young people

[INSERT GREENFLOW MINIMUM-AGE POLICY AND ANY REQUIRED SAFEGUARDS.]

12. Changes and contact

We may update this Policy as Greenflow, its technology or applicable law changes. The current version will show its effective date.

If we materially change how we use personal information, we will take reasonable steps to tell affected users where required.

Questions, concerns and privacy requests can be sent to: