Privacy

The short version

• The signup form asks for your name and your email. Nothing else is required.
• Your name is public after you confirm it by email. Your email is never public, and is never sold.
• We will never email you unless it is critically important. No newsletter. No marketing.
• You can remove your name at any time. We delete the record and keep only a salted hash of your email address in a suppression list; the hash is not linked to your name and is never used to contact you.

What we collect

Your display name, your email address, and the times you confirmed or withdrew. Your email address is stored in WASH's database so we can send your confirmation link and remove your name when you ask. The current signup form sends empty country and reason fields; if a future form lets you add them, they would be held under the same rules below.

We also store a salted hash of the IP address used when a name is added, to prevent abuse. The raw IP address is not stored. Rate-limit records use salted hashes and are pruned after two days.

When you withdraw, we delete your name and email from the signature record. We keep a separate salted hash of your normalised email address in a suppression list, with the date of removal. It cannot be used to contact you and is not shown anywhere on the site.

Why we collect it

To run the Human Voice: to confirm you are a real person adding your own name, to show the count, and to contact you only if something critically important happens for WASH. We do not send newsletters, we do not profile you, and we do not use your name or email for advertising.

What is public

The signup form publishes your display name. Nothing else. Your email is never shown, and is not visible to other people on the site. If a future form accepts an optional country or reason, the label will say whether that field is public before you submit it.

Where it is stored

Signatures are held in WASH's own database on the server. In production, confirmation emails are sent through the configured mail provider; local development writes them to a local outbox instead. We do not sell or share your email for marketing. The hosting provider and region, the production email provider and the retention period for unconfirmed sign-ups will be published here at launch.

Unconfirmed sign-ups currently remain until they are removed. A retention period will be published here before launch.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Under POPIA and, where it applies, the GDPR, you can also object to processing and complain to a regulator. The information officer's contact details will be published at launch.

Removing your name

Use the link in any email we sent, or start at the withdraw page. Your name leaves page one immediately. We delete your name from our records. Any backup copies are removed under the retention policy published at launch.

Cookies and analytics

This site sets no cookies and runs no analytics.

Children

WASH is not directed at children. A minimum age will be published here before launch.

Changes

If this notice changes, the date at the top changes. If the change affects what is public, we will say so in plain words.