Solarpunk
Log in

Privacy policy

Last updated: 13 October 2026

This policy explains what personal data Solarpunk Taskforce (“we”) collects when you use solarpunktaskforce.org, why, who processes it for us, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Who is responsible

Solarpunk Taskforce, Vienna, Austria (a private, non-commercial initiative; not yet a registered organisation). Email: contact@solarpunktaskforce.org. See also the legal notice.

2. What we collect and why

Your account

When you sign up we store your email address, a password (stored only as a secure hash by our authentication provider), your first and last name, the country you live in and, if you add them, the country you are from, occupation, organisation, bio, photo link and social links.

  • Why: to create and run your account and show your public profile. Legal basis: performance of our agreement with you (Art. 6(1)(b) GDPR).

What you publish

Projects, organisations, funding opportunities, issue reports, updates, posts, comments, likes, follows and uploaded images. Most of this is public by design, together with your name. You can report an issue anonymously: your name is then hidden from the public, but our moderators can still see who submitted it.

  • Legal basis: performance of our agreement with you (Art. 6(1)(b) GDPR).

Notifications and email

We show in-app notifications (for example new followers or updates on projects you follow) and send service emails (for example when you are added to a project, or to reset your password). You can turn email notifications off in Settings.

Moderation and security

We review new projects, organisations, funding and issues before they are published, and we keep records of who approved or rejected them. Our hosting providers keep short-lived technical logs (such as IP address and time of a request) to keep the service secure. Legal basis: our legitimate interest in a safe, trustworthy platform (Art. 6(1)(f) GDPR).

Visitor statistics

We use Vercel Web Analytics to count page views. It does not use cookies and does not build profiles of individual visitors; we only see aggregated numbers (such as pages, countries and referring websites). Legal basis: our legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR).

3. Cookies and local storage

We only use what the site needs to work: a cookie that keeps you signed in, and your browser's local storage for small preferences such as the width of the filter panel. We do not use advertising or tracking cookies, so we do not ask for cookie consent.

4. Services we use

These companies process data on our behalf, under data processing agreements:

  • Supabase (database, sign-in and file storage). Data is stored in the EU, in Frankfurt, Germany.
  • Vercel Inc., USA (website hosting and visitor statistics). Requests are processed in Frankfurt, Germany; Vercel is certified under the EU-US Data Privacy Framework.
  • Scaleway SAS, France (sending emails).
  • Mapbox Inc., USA (maps, the globe and place search). When you view a map or search for a place, your IP address and the search text are sent to Mapbox. Transfers are covered by the EU Standard Contractual Clauses.

We do not sell your data and do not share it with anyone else, unless the law requires us to.

5. How long we keep data

  • Account and profile data: until you delete your account.
  • Content you publish: until you or we remove it. When you delete your account we delete your profile and remove or anonymise what you published.
  • Technical logs: kept by our hosting providers for a short time, typically up to 30 days.

6. Your rights

You have the right to:

  • see the data we hold about you, and get a copy (access and portability);
  • correct it (most of it you can edit yourself on your profile);
  • have it deleted, or its use restricted;
  • object to processing based on our legitimate interests;
  • withdraw any consent you gave, at any time.

To use these rights, or to delete your account, email contact@solarpunktaskforce.org. We reply within one month. You can also complain to a data protection authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna.

7. Changes

We will update this policy when we add features or services that process personal data (for example AI-assisted search, which we plan to run with Mistral AI in the EU). The date at the top shows the latest version.