Privacy notice

We collect only what's needed to run group testing: your name or handle, email, password (stored as a one-way bcrypt hash), group memberships, pledges/donations you record, samples you submit and files you upload.

• Who sees what: group results and member lists are visible only to that group's members and leads. Lab staff see samples approved for testing (submitter name, sample details, files). Results only become public to other members if a group lead publishes them or creates a share link.
• Guest contributions: no account is created. An optional name and email, the amount, and a campaign ID are stored. The status link is an unguessable token; only its hash is kept. Optional email is delivered only when SMTP is configured — otherwise it stays in the admin outbox and is not sent.
• Payments: we never collect or store card numbers. Card checkout is not enabled. e-Transfers happen outside the platform; a treasurer records that they arrived. A pledge is not itself a payment.
• Emails: sent only for account security and status updates on samples/campaigns you're involved in.
• Retention & deletion: ask a site admin to export or delete your account. Financial ledger entries are kept (anonymized) for group accountability.
• Location: data is stored with the hosting provider chosen by the operator; see the README for Canadian-region hosting options.

Operator: the community admins. Contact them via your group lead. This notice is a starting template — have it reviewed for PIPEDA compliance before launch.