Privacy Policy

1. Overview

Red Panda Log ("we", "our", or "us") is a community web application that helps users discover and track red pandas at zoos around the world. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

We collect information only when you choose to sign in. We use Google OAuth 2.0 as our sole authentication method. When you sign in with Google, we receive the following information from your Google account:

• Your display name
• Your email address
• Your Google profile picture (avatar URL)

We do not collect passwords, payment information, or any other sensitive personal data. Visitors who browse without signing in are not tracked beyond standard server request logs.

3. How We Use Your Information

The information collected is used solely to:

• Create and maintain your account on Red Panda Log
• Display your name and avatar publicly next to your contributions (e.g., as the logger of a red panda or zoo). Your email address will strictly remain private.
• Allow you to save favourite red pandas and submit contributions
• Identify your session securely across page visits

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Data Storage & Security

Your account data is stored securely using Supabase, a hosted PostgreSQL platform with row-level security. Authentication sessions are managed via encrypted cookies. We take reasonable precautions to protect your information, but no system is entirely immune from security risks.

5. Google OAuth Scopes

Red Panda Log requests only the minimum necessary OAuth scopes from Google:

• openid — to verify your identity
• email — to associate your account with an email address
• profile — to display your name and avatar

We do not access your Google Drive, Gmail, contacts, calendar, or any other Google services.

6. Cookies & Sessions

We use session cookies to keep you signed in. These cookies are essential for the application to function and are not used for advertising or cross-site tracking. They are automatically cleared when you sign out.

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request deletion of your account and associated data
• Revoke Red Panda Log's access to your Google account at any time via your Google account settings

To request account deletion, please contact us at the email address below.

8. Children's Privacy

Red Panda Log is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. Continued use of the application after changes constitutes acceptance of the new policy.

10. Contact

If you have any questions or requests regarding this Privacy Policy, please contact us at: hello@redpanda-log.com