How we look after your data

Who is responsible

The four organisers of Saviours Anonymous: Olivier, Nils, Leonardo and Hans. You can reach all four at hello@savioursanonymous.org. That address is a shared mailbox for the group, not anyone's personal or work inbox.

What we keep

• The answers you give. Every question is optional, apart from choosing to join as a player or a follower, and agreeing to the data note.
• Whether you joined as a player or a follower, when you submitted, and which version of the data note you agreed to.
• While you're filling in the form, a cookie in your browser holds a random code so your answers can be saved as you go. It holds nothing else and stops working when you submit.

What we don't keep

• No IP addresses, browser details or tracking codes. To slow down abuse, the platform keeps a scrambled code made from your connection, which changes every day and is deleted within hours. It can't be turned back into an address.
• If you ask for a "come back later" link, we use your email address once, to send it, and don't store it. You only give us an email address to keep if you fill it in on the last page.
• No analytics, advertising, tracking pixels, chat widgets or outside fonts. Your browser only talks to our own site.
• No names of substances. The questions about practices use fixed options only.

Who sees your answers

• Only the four organisers, through a private area that needs a sign-in link sent to their email.
• Every time an organiser opens your answers, exports them or deletes them, it is recorded in an access log. The log is kept for two years.
• Nobody else, unless you said yes on the last page: to sharing your name, city, fields and question with the people in your future cohort, or to research partners inviting you to their surveys. Research partners receive an invitation for you, never your answers.

Where it's kept, and who helps us

The answers are stored in the EU. Three services help us run the platform, each under a data processing agreement that bars them from using the data for anything else:

• Hosting: Vercel, with the platform running in Frankfurt, Germany.
• Database and organiser sign-in: Supabase, in Frankfurt, Germany.
• Email (sign-in links and "come back later" links): Scaleway, in France.

Vercel and Supabase are US-owned companies, even though our data sits in their EU data centres. We chose them to start quickly, and built the platform so it can move to EU-owned hosting without losing anything.

How long we keep it

• Answers about practices: deleted three months after cohorts form, without asking.
• Everything else: deleted at the end of 2027, unless you tell us you'd like to stay.
• A form you started but never finished: deleted 60 days after you last saved it.
• "Come back later" links: they work once and expire after 30 days.
• Backups of the database: kept for up to 7 days, then gone.
• The hosting service's request logs, which include IP addresses: up to one day.
• The access log: two years.
• If an organiser downloads answers to work on them, they delete the file once it has been used.

Changed your mind?

Email hello@savioursanonymous.org and we'll delete everything about you, straight away, in one step. You can also ask for a copy of your answers, or for something to be corrected.

If you're unhappy with how we handle your data, please tell us first. You also have the right to complain to the data protection authority in your country.

Cookies

Only the ones the form needs to work: one that keeps your answers while you fill in the form, and one that keeps an organiser signed in. No tracking cookies, so there is no cookie banner.