What we hold about you, and why
Written to be read in full. No clauses inherited from a template, and no “we may collect” where the concrete answer is yes or no.
We keep your email address, an approximate location from the moment you register, and technical details about your connection (provider, postal code). We do not store your IP address, we do not use your device’s GPS, there is no advertising, no third-party analytics, and we sell nothing.
Who is responsible
Sentry View is an independent security intelligence platform operated by Sentry UAV NSCE SpA (Chilean tax ID 77.779.577-5). The data controller is Sentry UAV NSCE SpA, reachable at gerencia@sentryuav.app — that is the company’s official address, which is why it does not share the platform’s domain. It is a small operation with centralised editorial and technical responsibility; we say so plainly because it conditions response times and the reach of coverage.
What we collect and why
When you create an account
- Email address and password. The password is never stored in plain text; it is handled by the authentication provider (Supabase) with standard hashing.
- Registration date and assigned role (Viewer, Member or Moderator).
Approximate registration location
Once only, at sign-up, an external IP geolocation service (ipwho.is) is queried and we keep:
- Country, region and city.
- Coordinates rounded to two decimal places, roughly one kilometre of precision. It is not your address.
- Time zone.
- Postal code, when the service returns one.
- Internet provider (ISP) and autonomous system number (ASN), when the service returns them.
The IP address is never stored, yours or anyone’s: it is sent to the lookup service and only the result is kept. The platform also never requests or uses device GPS anywhere.
The combination of internet provider, autonomous system number and postal code is fairly specific information about a connection. On its own it does not identify a person, but it is more than what “which country are they writing from” requires. It is collected to detect abusive or automated sign-ups, which is a real problem on an open platform covering a context of violence.
If you would rather not provide it, you can register through a VPN: the location stored will be the VPN’s and the platform works exactly the same. And if you already registered and want that data removed from your profile, ask by email and it will be deleted.
While you use the platform
- Your browser stores locally your chosen language, which panels you collapsed and the date of your last visit. That information never leaves your device and is erased if you clear site data.
- We do not record your path through the application, which reports you opened, or how long you stayed.
- The hosting provider (Vercel) generates standard server logs, subject to its own policy.
If you file a report
Only moderation accounts can file reports. If yours does, the internal user identifier, the report content and the metadata of any photographs you upload are associated with it — including capture date and, when the file carries it, sensor position. Check that metadata before uploading if you do not want it kept.
Who can see what
| Data | Who sees it |
|---|---|
| Your email, role and registration date | You and moderation accounts |
| Your approximate registration location, ISP, ASN and postal code | You and moderation accounts |
| Your password | Nobody — not even us |
| Your activity inside the platform | Nobody — it is not recorded |
Today there are very few moderation accounts and they are administered directly by the project operator. No third party has access to the database.
Third-party services
The platform relies on these providers, each with its own privacy policy:
- Supabase — database, authentication and file storage.
- Vercel — site hosting.
- ipwho.is — IP geolocation, queried once at sign-up.
- CARTO and Esri — base map and satellite tiles.
- TomTom — vehicle traffic layer for the Haiti and Africa regions, when enabled.
- Google Fonts — typefaces.
When the map loads, your browser contacts the tile providers directly, which exposes your IP address to them as any other site with maps would. We cannot avoid that without dropping the map.
How long we keep it
- Your account and profile: as long as the account exists. If you ask for deletion, they are erased.
- Automatically ingested news headlines: 60 days, then deleted automatically.
- Reports and map layers: kept as a historical record. They contain no personal data about people who consult them.
Your rights
At any time, without giving a reason, you can ask to access everything we hold about you, correct it, delete specific fields (for example the ISP and postal code, keeping the account), or delete the entire account with all its data.
Write to gerencia@sentryuav.app from your account’s email address. The commitment is to reply within 30 days.
Minors
The platform is not aimed at people under 16 and accounts are not knowingly created for them. If we find one, it is removed.
Security, and its limits
Access to information is enforced by database-level permissions, not just by the interface: someone without the right role does not receive the data, however they manipulate the browser. Exact report coordinates are degraded on the server before being sent to Viewer-level accounts.
That said, no system is infallible and this one is run by one person. If we detect an incident affecting personal data, we will notify affected accounts by email, describing what happened and which data was involved.
Changes to this policy
If it changes substantially, we announce it on the platform. The date of the last update is always at the top of this page.
Payments and billing
Membership charges are processed by Flow, an external payment processor. Sentry View does not receive or store card data: it is entered directly in the processor's environment and is subject to its privacy policy.
From that process, Sentry View keeps only what is needed to know whether an account has active access: the order identifier, the payment date and the date until which membership is active. That information is kept while the account exists and for as long as applicable accounting obligations require.