PRIVACY

Privacy and private submissions

Who is responsible and how to contact us

The Ocorrências na Madeira project administration team is responsible for the processing described on this page. Questions, access, correction, objection or deletion requests can be sent to .

Information we process

A submission contains the description, selected coordinates, approximate time, consent timestamp and up to three optional photographs. We do not ask for a name, email address or telephone number. Security services may process the IP address and basic technical request data to prevent automated abuse; the application rate limiter keeps only a short-lived in-memory counter.

Purposes and legal grounds

Submission data is used only to assess and verify the information, contact no one, prevent misuse and document the moderation decision. The submission is processed on the basis of the consent given in the form. Essential security processing is based on the legitimate interest of protecting the service and its users.

Publication and verification safeguard

A community submission remains private. Moderation can turn it into an internal draft, but the system blocks publication while it is identified only as community information. A separate official source must be found before any public notice can be created.

Storage, service providers and retention

The database and private media storage are provided by Supabase; automated-abuse protection may be provided by Cloudflare. Access is limited to authorised administrators. Image metadata is removed before upload. Unreviewed or rejected submissions and their private media are automatically deleted within 30 days. A verified submission is deleted within 90 days of moderation. Any retained moderation audit is minimised so it does not contain the submission text, location or private media details. Public operational records follow the retention rules of their original official sources.

Location and preferences on this device

Browser geolocation is requested only after choosing “Use my location”. It is used locally to position the map or fill in coordinates and is not stored unless the user submits the form. The chosen language and municipality may be stored in this browser so the site opens with the same preferences. No advertising tracker is used for these preferences.

Optional device notices and submission receipts

If you activate browser notices, the service stores an anonymous push endpoint and the municipalities, categories and bus routes you select. It does not ask for a name, email or precise location. You can deactivate the subscription on the same device. After a community submission, a random receipt is shown once; only its cryptographic hash is stored on the server. Anyone with the receipt can see the processing state, but never the submitted text or photographs.

Optional analytics

Google Tag Manager is present on every page but loads only after you allow anonymous analytics. It may then load the analytics tools configured by the project to measure aggregate interactions such as opening a public source, using a category or installing the app. We do not send submission text, photographs, precise coordinates, telephone actions or health choices. Advertising storage and personalisation remain disabled. You can withdraw your choice at any time using “Analytics preferences” in the footer.

Your rights

You may request access, correction, deletion, restriction, portability where applicable, object to processing, or withdraw consent without affecting prior lawful processing. You may also lodge a complaint with the Portuguese Data Protection Authority (CNPD). See CNPD guidance ↗

PRIVACY

Essential device preferences are always available. Google Tag Manager loads only after you allow analytics.