Draft for legal review — not approved for public launch

Privacy policy

We collect the account name, email address, authentication and security records, timezone, followed counties, notification preferences, and delivery history needed to operate the service. We do not sell account data or use it for advertising in version 1.

Providers and location data

Google and Facebook may process authentication data when you choose those sign-in options. Google Maps may receive incident coordinates and standard browser request data on authenticated pages where an incident map is requested. Geoapify processes validated incident coordinates on our server so we can store and display a separate estimated address with provider attribution. The estimate never replaces NERIS location text or coordinates and is not represented as an official incident mailing address.

Your choices

Signed-in users can export account data, change alert preferences, unlink login providers when another sign-in method remains, and request account deletion through profile settings.

Retention periods, legal basis, processor identities, contact details, and jurisdiction-specific rights require owner and counsel approval before launch.