Privacy Policy

Who we are

Kutoa Advocates is a program of Kutoa Foundation, P.O. Box 38302, Olmsted Falls, Ohio 44138. For anything on this page, write to evan@kutoafoundation.org.

What we collect

Only what you type into a form or an account. We do not buy data about you and we do not track you around the internet.

If you fill in a form

The Join Advocates, Start a Chapter and Micro-grant forms ask for your name, a preferred name if you use one, your email address, your phone number, an Instagram handle if you choose to give one, your school or organisation, your city and state, and your grade or age. The chapter and grant forms also ask about what you want to build. Answers are emailed to Kutoa and are not stored on this website.

If you create an Advocate account

We store your email address, a hashed version of your password — we never see or keep the password itself — your name, your chapter, and optionally your city and your grade. We also store the avatar you pick, the points you log, and any note you add to a point entry.

If you turn on two-step verification we store the secret your authenticator app needs. We never receive the six-digit codes themselves.

What we do not collect

No analytics, no advertising pixels, no third-party trackers, and no cookies. The only thing this site puts in your browser is a single sign-in token stored while you are logged in, which is deleted when you sign out. Nothing is stored in your browser unless you log in.

Who can see it

Inside the Advocate portal, other signed-in Advocates can see four things about you: your name, your avatar, your chapter, and your points total. That is the whole list.

Your email address, your city, your grade, and the notes on your point entries are visible only to you and to Kutoa staff. They are not shown on any leaderboard and other members cannot read them.

Form answers go to Kutoa staff. Grant applications are read by the people deciding grants.

We do not sell your information, and we do not share it with anyone outside Kutoa except the service providers listed below, who handle it on our behalf.

Services we rely on

Running this site means a few companies necessarily see some data:

• Supabase — stores accounts, profiles and points, and handles sign-in.
• Vercel — hosts the website and records standard server logs.
• Web3Forms — delivers form submissions to Kutoa by email.
• Google Fonts, unpkg, cdnjs and jsDelivr — serve fonts and code libraries. Loading a file from them reveals your IP address to them, as it does on most of the web.
• Esri / ArcGIS — supplies the map tiles on the chapters page.

How long we keep it

Account information is kept while your account exists. Form submissions are kept as email in Kutoa's inbox. Ask us to delete either and we will.

Your choices

Write to evan@kutoafoundation.org to see what we hold about you, correct it, or have it deleted. A parent or guardian can make that request for their child. We will not require an explanation and we will not penalise a chapter for it.

Most of what we store you can change yourself: your avatar from the portal, your points by removing an entry, and your password from the log-in page.

Students under thirteen

Kutoa Advocates is built for high school students, and accounts are not intended for children under thirteen. If you believe a child under thirteen has created an account, tell us and we will delete it.

Keeping it safe

Passwords are hashed, the connection is encrypted, two-step verification is available on every account, and the database is configured so that one member cannot read another member's private fields. No system is perfect, and we will not pretend otherwise — but if something goes wrong we will tell the people affected rather than quietly fix it.

Changes

If this policy changes in a way that matters, we will change the date at the top and say so to members.