Privacy

• No Google Analytics, Facebook Pixel, TikTok Pixel, or any other third-party analytics tag.
• No advertising. No marketing pixels. No cross-site tracking.
• No fingerprinting. No device-ID collection.
• No location tracking. We do not request geolocation.
• No personally-identifying account creation. There are no user accounts on the public site.

Your browser fetches HTML, CSS, JavaScript, fonts, icons, and (when used) audio clips. Server logs from our hosting provider record standard HTTP-request data — IP address, user-agent, requested path, response status — for security and abuse-prevention. We do not aggregate, sell, or transfer these logs.

Our service worker (when you visit while online) saves emergency pages on your phone so you can use them later without internet. The cache lives in your browser only.

We use first-party cookies and storage only in two very narrow places. The admin console at /admin/* sets a single httpOnly token cookie when an authorized administrator signs in. Public visitors never see it. The 'Saved offline' pill and the share prompt use sessionStorage to remember that you dismissed them in the current tab.

If you submit a community resource via /resources/submit, we keep the organization details you provided (name, address, contact, languages, notes). The submitter name and email are optional. We never publish a submitter's email.

Submissions are stored in our Supabase database (US region) until reviewed by a moderator. Approved entries are published; the rest remain in moderation queue.

Donations are processed by Stripe. We never see your card number. Stripe stores your payment data subject to Stripe's privacy policy.

Our webhook records: donation amount, currency, the Stripe session id, customer email (only if you provided it to Stripe), and timestamp. We use this only to confirm fulfillment and produce annual transparency reports — never for marketing.

Audio clips are streamed from our own server. No third party sees that you played a clip. Nothing is logged about which clip you played, how long you listened, or in which language.

We deliberately allow major AI assistants (ChatGPT, Claude, Perplexity, Google AI Overviews) to read our public guides via robots.txt. We believe that when someone asks an AI 'what do I do if ICE comes to my door?', the AI should be able to surface verified, attorney-reviewed information rather than guessing. Indexing our content does not give those services access to any visitor data — only the public content itself.

The site is meant to be safe for children to navigate during a crisis. We do not collect data from anyone — minors or adults. There is no account creation, no profile, no targeted content.

Every emergency page carries a Quick Exit button that immediately replaces the current tab with google.com — the same industry-standard pattern used by RAINN, the ACLU, and Planned Parenthood. We also overwrite the current history entry before navigating away so the original Tengo Derechos URL is removed from the browser's back-stack.

Because we do not collect personal data on public visitors, there is nothing to access, correct, port, or delete on your behalf. If you submitted a community resource and want it removed before publication, email [email protected] with the submission ID; we'll delete the row.

California residents have the right to know what is collected and to opt out of sale of personal information. We do not sell personal information. Period.

Privacy questions: [email protected]. Security disclosure: see /about/security and /.well-known/security.txt.