Data & privacy
This page explains what information we collect when you request a collection, why we need it, who processes it, and what your rights are. We collect as little as possible: no account, no cookies, no tracking.
Who is responsible
The data controller is [Organisation name and address]. For any question about your data, or to exercise your rights, contact [privacy@example.org].
What we collect
When you send a collection request, we store:
- The photo of the bin. Before uploading, your browser re-encodes it, which removes embedded metadata such as the camera model.
- Which bin you reported, how full you say it is, the automatic estimate (with the method and how confident it was), the issues you ticked and your note.
- Your approximate position, only if your browser shared it with us or your uploaded photo contained a GPS location, and the distance between you and the bin. We use this to suggest the right bin and to spot reports made far away from it.
- Your email address, only if you give it.
- The language you used and the time of the request.
What we don't collect
- No account, name or phone number.
- No cookies and no analytics or advertising trackers.
- No video: the camera preview is shown on your screen only, and nothing is captured until you press the button.
- We don't ask for your location when you arrive through a bin's QR code: we only use it if you already allowed it, or if you tap a button to use it.
Why we use it
We use your request to plan and carry out the emptying of the bin, to improve where bins are placed, and to detect misuse. Our legal basis is our legitimate interest in running the collection service. If you give your email address, we use it only to tell you when the bin has been emptied, based on your consent, which you can withdraw at any time.
Who processes your data
- Supabase stores the requests and photos for us. Photos are in private storage; staff of the collection programme see them through links that expire after an hour.
- Our website is hosted by [hosting provider and region].
- Anthropic (Claude) may analyse the photo to estimate how full the bin is, if the estimate made on your device isn't reliable enough. We send the photo and the list of nearby collection points, not your location or email. Anthropic doesn't use data sent through its commercial API to train its models.
- If your device runs the in-browser AI model, it is downloaded from Hugging Face and jsDelivr. As with any download, they see your IP address. Your photo stays on your device for that step.
How long we keep it
We keep requests and photos for [retention period, e.g. 24 months], after which they are deleted. Your IP address is only held in memory for up to an hour to limit abuse, and isn't stored with your request.
Your rights
You can ask to see, correct or delete the data about you, object to its use, or withdraw your consent for email. Send your request to [privacy@example.org], ideally with the reference shown after you sent your request. You can also file a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).