ColonyCat
Sign in

Privacy Policy

Effective 2026-06-13

What we collect

  • Account: email address, optional name, phone, and address (you choose what to share).
  • Organization records: colonies, cats, feedings, TNR events, reports, photos. Plus addresses you provide for your organization's location.
  • Skills: the volunteer-skill tags you pick on your profile.
  • Sign-in records: when you signed in, from what IP, so we can detect abuse.

Who sees what

  • Other members of your organization see colony/cat/feeding/report records. Organization Administrators can also see members' phone numbers and addresses (so they can reach you when a cat needs urgent help).
  • Other organizations cannot see your records. Every query in the app is scoped to your organization's id at the database level.
  • The public sees only what your Organization Administrator opts to publish on your organization's public landing page at yourgroup.colonycat.org. Even then, no GPS coordinates and no individual volunteer information.
  • Platform staff may access records when you ask us to (support) or when investigating an abuse report. We log this access; you can request the log for your organization.

What we share with third parties

We use a handful of vendors to run ColonyCat. They see only the data they need to do their job:

  • Cloudflare (Workers, D1, R2) hosts the app and stores data. They don't read your records.
  • Resend sends transactional emails (sign-in links, invites). They see the recipient address and message body.
  • OpenStreetMap / Nominatim geocodes your organization's address into lat/lng for "find caregivers nearby" features. They see the address string you submit, no other data.
  • ProPublica Nonprofit Explorer verifies 501(c)(3) status when you submit an EIN. They see the EIN you enter.

We do not sell your data, and we don't run advertising or behavioral tracking. We may disclose data when required by law (e.g., a valid subpoena or court order). If we receive such a request and the law permits us to tell you, we will.

Cookies

One cookie, cc_sid, holds your sign-in session for 30 days. That's it. No analytics cookies, no ad-network cookies.

Your rights

You can:

  • See your account data on your profile page at any time.
  • Edit anything on your profile.
  • Export your account data from your profile, or your organization's data from Organization Profile (Organization Administrator).
  • Delete your account from your profile, or your organization from Organization Profile (Organization Administrator). Deletions have a 30-day grace window; cancel any time before then.
  • Change your account email through the email confirmation flow on your profile.

Data retention

If you cancel or delete your account, we keep records for 30 days in case it was an accident, then permanently delete them. Sign-in logs are kept for 90 days for abuse investigation. Anonymized aggregate stats (total organizations, total cats, etc.) we may keep indefinitely.

Children

ColonyCat isn't intended for use by children under 13. If you believe a child has created an account, email us and we'll remove it.

Contact

Privacy questions: hello@colonycat.org.