Privacy

• When you send a form (contact, volunteer, partnership or drive sign-up): your name, email, and anything else you choose to give us, such as phone number, city and your message. We also record the internet address the form came from, to block spam.
• When you sign in with Google: your name, email address, Google profile picture and Google account ID, plus when you last signed in. We never see or store your Google password.
• When a team member uses our operations desk: a record of the changes they make (for example, editing a drive), so the team can see who changed what.

• No advertising, no tracking pixels, and no analytics cookies.
• We do not sell, rent or trade your information.
• Donations are made through UPI in your own payment app. This website never sees your bank or card details.

To reply to you, to organise drives and volunteers, to let our team sign in to manage the website, and to keep the site safe from spam and misuse.

We use one cookie, and only after you sign in: hy_session keeps you signed in for up to 24 hours. It is removed when you sign out. Visitors who do not sign in get no cookies from us.

Your information is stored and handled by these services, which run the website on our behalf:

• Neon (database) and Google Cloud (our server), both hosted in Singapore.
• Netlify (serves the website pages).
• Google (sign-in).
• Resend, if enabled, to email our team when a form is sent.

Form messages and accounts are kept for as long as we need them to work with you, and deleted on request. Records of team changes are kept so the site's history stays accountable.

You can ask to see the information we hold about you, have it corrected, or have it deleted. Write to us at our contact page and we will respond within 30 days.

If we change what we collect, we will update this page and the date at the top.