Privacy policy

1. Who processes your data

The data controller is the Oro pavojus project (oropavojus.lt). The controller’s exact legal status and details will be published before the public launch. Send questions about data processing to info@oropavojus.lt.

2. What we collect and why

Data	What we use it for	Legal basis	How long we keep it
Account: first name, last name, email, sign-in method	Your account, abuse prevention, contacting you about your reports	Contract (terms of use)	Until you delete the account; 30 more days in backups
Settings	Providing the service	Contract	As long as the account exists
Drone reports with exact location and time	Crowd sightings, abuse prevention	Legitimate interest (public safety information) and consent when submitting	Exact location 30 days, then snapped to a 1 km grid
Hashes of the IP address and device	Abuse prevention	Legitimate interest	7 days
Shelter reports and comments	Letting others know a shelter’s condition	Legitimate interest, contract	1 year, then anonymised
Location for finding the nearest shelter	Providing the service	Consent (browser permission)	Not stored on the server: calculated on your device
Browsing statistics (Google Analytics), only if you agree: the page address without query parameters, the title, browser and device data, an approximate location derived from the IP address, a random browser id	Counting visits and improving the site	Consent (you can withdraw it at any time)	Google Analytics: up to 14 months; cookies: 365 days after the last visit
Confirmation that this site is not an official source: a random number, the notice version, the language and the time (not linked to an account or an IP address)	Showing that the notice was shown and accepted	Legitimate interest	As long as the service runs
Server logs	Security and operations	Legitimate interest	30 days
Administrator audit log	Accountability	Legitimate interest	2 years

We use no advertising cookies. We use analytics cookies (Google Analytics) only if you agree; see Cookies. We never sell data or share it for advertising.

Your name is shown publicly next to shelter reports only if you turn this on in the settings. Otherwise we show “User”.

3. How we protect location data

• Exact drone report locations are visible only to the person who reported and to administrators. Every administrator view is logged.
• The public only sees aggregated sightings once the reporter threshold is reached, with the position rounded to at least 250 m.
• Database backups are encrypted.

4. Who else processes data

We use Google Cloud and Firebase (Google) to run the service. The database is stored in the European Union (region europe-central2, Warsaw). Google may process Firebase Authentication account data outside the EU under the standard contractual clauses approved by the European Commission.

Sign-in, sign-up, password reset and drone and shelter reports are protected from bots by Google reCAPTCHA Enterprise and Firebase App Check. When you use them, your browser sends Google technical data about your device and browser and about how you interact with the page, including your IP address. The legal basis is our legitimate interest in protecting the service from abuse. Google’s Privacy Policy and Terms of Service apply to reCAPTCHA.

If you agree to analytics, browsing statistics are processed by Google Analytics (Google Ireland Limited). Google may also process this data in the United States; Google LLC takes part in the EU-U.S. Data Privacy Framework.

5. Your rights

You have the right to:

• get a copy of your data (export it in the settings);
• correct inaccurate data (in the profile settings);
• delete your account and data (in the settings). When you delete your account, your reports are anonymised;
• object to processing based on legitimate interest and withdraw your consent (for analytics cookies, on the Cookies page).

We answer requests within 30 days. You may also lodge a complaint with the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).

6. Children

You must be at least 14 years old to create an account.

7. Changes

We will announce material changes to this policy in the app. The “Updated” date at the top of the page shows the latest version.