Privacy notice

What we collect

We collect only what we need to run the program: your account details, the city you care about, and the ways you want to help.

When you sign in with Google or Microsoft, the provider sends your name and your email address. We use the name for your account, and you can change it in Settings.

• Your account details, such as your display name and email address.
• A session and an audit record each time you sign in.
• Forms for starting a hive, volunteering, or hosting. These can include your name, email address, phone number, city, state, ZIP code, the ways you want to help, the times when you can help, an age range, whether you have transport, and the materials you can bring.
• Notes that staff add to your submissions.
• Shipping addresses for orders that ship.
• Your newsletter subscription and a record of your consent.
• Your mobile phone number, if you ask for text messages, and a record of the kinds of text that you choose.

How we use your information

We email you about the cities and campaigns you follow. If you turn on text messages, we text you only about the kinds that you pick.

Intake mail goes only to the verified email address on your account.

Transactional emails are about an action or a state that your account is part of. They do not depend on marketing consent. Text messages always depend on your consent, and you give it for each kind.

Who we share information with

We do not sell personal information.

We do not share your mobile phone number or your text consent with anyone for their marketing.

• Stripe, which runs hosted checkout for payments.
• Google and Microsoft, only when you choose to sign in with them.
• An email service that sends our messages.
• Amazon Web Services, which sends our text messages, and the mobile carriers that deliver them.

Hive locations

We may share the general area publicly. The exact hive location can remain private to protect the bees, volunteers, and host property.

Exact hive and host coordinates must stay private unless an authorized publishing decision allows publication.

Payments and orders

Payments run through Stripe Checkout. Stripe collects card details on its hosted page. Card data never reaches our servers.

We keep order and payment records. We will state how long we keep them before launch.

Newsletter

When you subscribe, we store your email address and a record of your consent. The record keeps the exact wording you saw.

We never change or delete newsletter consent records.

To withdraw consent, email hello@savethebees.com.

We do not store an IP address, a user agent, or other visitor data with a subscription.

Text messages

If you ask for text messages, we text your mobile number only about the kinds that you pick in Settings. The kinds are a code to check your number, an order that shipped, an order that needs a shipping address, a campaign that you follow, and a hive that you follow.

We text a code to check your number. We send no other text until you confirm the number with that code. Message frequency varies with your orders and with what you follow. Message and data rates can apply.

Reply STOP to any text to stop all texts. Reply HELP for help, or email hello@savethebees.com. You can also remove your number in Settings.

We do not share your mobile phone number or your text consent with anyone for their marketing. Amazon Web Services sends our texts, and mobile carriers deliver them.

We record each text consent with the time and the wording that you saw. A change adds a new record, and we do not edit an old one.

Cookies

We use only essential cookies. We do not set tracking or advertising cookies. Essential cookies stay on whether you accept or reject the cookie notice.

• atb_session keeps you signed in. A session ends after 7 days without activity. It also ends after 30 days in total.
• atb_oauth holds the sign-in state token for a Google or Microsoft sign-in. It expires after 10 minutes.
• atb_cookie_notice remembers your choice about the cookie notice. It lasts one year.

IP addresses

Our Backend does not store IP addresses or user agents in its database or request logs. If the Backend does not recover a panic, the server can write the client address to its error log.

It keeps a client IP address in server memory only to limit request rates. It removes an address that has sent no request for about ten minutes. It checks for such addresses only when it allows a request, and at most once a minute. An address can stay in memory longer when there is little traffic.

Sign in

You can sign in with a Google or Microsoft account where we offer that option.

We use an email address from Google or Microsoft only when the provider proves that you control it.

We do not store the authorization code or the tokens that Google or Microsoft return.

We do not log your email address or your provider's user identifier.

We do not create an account from a Google or Microsoft email address that the provider does not prove.

You can also ask for a sign-in link by email. The link works once for 20 minutes.

Our message queue keeps the sign-in link until we send the email. If sending fails, the link stays in the queue, including after our last attempt.

Play games

The game asks for no name, email address, or photo. It has no analytics identifier.

The game does not set cookies, and it does not use local storage or session storage. It saves nothing in your browser.

Your account data

You can ask for a copy of your account data. You can also ask us to delete your account. Email hello@savethebees.com to make either request.

Deletion clears your name, email address, phone number, host and beekeeper details, and site notes from your intake records. It keeps the type of each submission, its status, the city, the dates, and staff review notes.

Deletion anonymizes your account. It also archives and blanks your saved shipping addresses and the address copies on your shipments. Shipment status, product codes (SKUs), and dates remain.

Deletion also withdraws your text consent and unlinks your mobile number from your account. We keep the number and the record of your text consent.

We cannot finish a deletion while a shipment on your account is scheduled, eligible, queued, packed, shipped, or held.

We can keep some records after deletion. We will state which records and for how long before launch.

Contact

To ask a privacy question or send a request, email hello@savethebees.com.