Privacy

IDG Earth is a prototype operated by We Remagine One AB (Swedish company registration 559316-0228), Karlstad, Sweden, in collaboration with people from the IDG community. For the personal data described here we are the data controller. Contact: echo@idg.earth.

It is an independent initiative, not run, affiliated with or endorsed by the Inner Development Goals Foundation.

• Hubs, networks and centres, with their contacts' names, roles and email addresses, copied from the Foundation's own public directory on innerdevelopmentgoals.org and kept up to date by their coordinators.
• Applications to start a hub or network: what the form asks, including the coordinators' names, email addresses and phone numbers. Some come from the Foundation's earlier application form; new ones are sent here.
• IDG Ambassadors and their cohorts, from the Foundation's programme records.
• People who sign in, and the links, location, photo and short text they choose to add to their own entry.

• A person is shown publicly while they are a contact of an active hub, network, centre, circle or cohort — that entity has to be able to show who looks after it — or when they have chosen to be listed. Otherwise their entry is not public: it is visible to people signed in to IDG Earth, who are themselves in the directory, and to those who administer it.
• An IDG Ambassador is shown publicly as an ambassador only once they have claimed their profile.
• Phone numbers are never shown publicly.
• The picture of the whole community, idg.earth/map.png, draws everyone in the directory who has a place — listed or not — as a dot at their city, with no name or anything else beside it. Choosing not to be listed does not remove that dot.
• The public hubs, networks and centres are also available to developers through an API that needs a key; the counts and the map picture need none. See Developers.

You sign in with your email address and a password, or with a code or link we send to it. Your account holds that address, the password in a form that cannot be read back, which entry in the directory is yours, and the language your sign-in emails are written in. Signing in sets a session cookie from our database provider, needed to keep you signed in.

The sign-in forms — signing in, a forgotten password, asking for a new link, and claiming a profile — are checked by Cloudflare Turnstile, which tells a person from an automated program. While one of those pages is open, your browser sends Cloudflare your IP address and details about the browser. Most people see nothing; now and then a box asks you to tick it. How Cloudflare uses that data is set out in its Turnstile Privacy Addendum.

Changes made by signed-in people are recorded in a change log — who changed what, and when — so that a mistake can be traced and undone. The change log is deleted after 180 days.

We send email only as part of something you or an admin started: a sign-in code or link, a link to claim or check a listing (valid 14 days), and the messages about an application — its receipt, a question, the decision. They are sent through Brevo, and the application page keeps a record of each one and whether it was delivered. We send no newsletters from IDG Earth.

The website counts page views with Vercel Web Analytics. It sets no cookies and stores nothing on your device, and we strip everything after a “?” from the addresses it records.

The IDG Earth app records anonymous usage events — which views are opened, for instance — tied to a random key for the installation rather than to a person. The country is read from the request, and the IP address itself is never stored. Events older than thirteen months are deleted automatically, every night.

• A cookie remembering the language you chose, for a year.
• Your light or dark choice, kept in your browser and never sent to us.
• When signed in, the session cookie described above.

• Vercel hosts the website; its servers for IDG Earth run in Stockholm.
• Supabase hosts the database and sign-in, in Stockholm (EU).
• Cloudflare checks the sign-in forms with Turnstile; your browser contacts it directly, so Cloudflare sees your IP address.
• Brevo sends the emails.
• CARTO supplies the map images; your browser fetches them directly, so CARTO sees your IP address.
• komoot's Photon suggests places as you type one into a form; your browser sends it what you type.

Keeping a directory of the IDG community's hubs, networks and centres and who looks after them, counting visits, showing on one map where the community is, recording changes, and keeping automated programs out of the sign-in forms are our legitimate interest (GDPR article 6(1)(f)): the community needs to find each other, and those contacts are already public on the Foundation's site. Your account, your own entry and an application exist because you asked for them (article 6(1)(b)).

You may ask what we hold about you, have it corrected or removed, and object to being listed. Much of this you can do yourself: sign in and edit your own entry, or choose not to be listed. Otherwise write to echo@idg.earth. If you are not satisfied with our answer, you may complain to the Swedish Authority for Privacy Protection, IMY.

IDG Earth is still being built, and this page describes it as it is today. When what we do with personal data changes, this page changes first, with a new date at the top.