Covering the CarbonSentinel and CarbonSentinel Aqua websites and mobile apps.
Last updated: 14 October 2026 · Data controller: Vulnerable Planet Ltd (company number 15501422)
| Data | Why | Kept |
|---|---|---|
| Email address | To identify your account, send password resets, and email you once your account is approved | Until you delete your account |
| Password | Stored only as a salted cryptographic hash — never in readable form | Until you delete your account |
| Registration and approval status — the date you registered, whether we've approved your account, and the access code we email you on approval | New accounts are reviewed and approved by us before you can sign in | Until you delete your account |
| Account tier, and optional organisation name and number | To apply the right access level and to label reports you generate | Until you delete your account |
| Projects you create — names and the map boundaries you draw or upload | To run assessments and show your saved work | Until you delete the project or your account |
| Login session tokens | To keep you signed in | Expire automatically after 30 days |
| Payment and donation records — Stripe session reference, amount, timestamps | To unlock what you paid for. Payments are currently switched off, so nothing is being charged right now | Deleted with your account. Stripe keeps its own transaction record |
| Visit records (Aqua) — time, device type, and a coarse location such as "Leeds, GB" | To understand roughly where the service is used | Until you delete your account |
The location is worked out from your IP address using a geolocation database held on our own server. Your IP address is used in memory for that lookup and then discarded — it is never written to our database or logs. Only the resulting city-and-country string is stored. The lookup is entirely local, so your IP address is never sent to a geolocation provider.
CarbonSentinel Aqua can centre the map on where you are, if you ask it to. Your device asks for permission first, and you can refuse — everything else still works. The coordinate positions the map; it is not stored as a record of your movements.
We use Umami, a privacy-focused analytics tool that we host ourselves. It sets no cookies, collects no personal data, and does not follow you to other websites. Analytics data is never shared with a third party, because it never leaves our server.
When you run an assessment, the coordinates of the area you are assessing are sent to public data providers, such as the organisations below, so they can return measurements for that area. No account information, email address or identifier is ever sent with them.
Payments are currently switched off. If and when they're on, Stripe processes payments and donations, and receives whatever you enter on its own checkout page. See Stripe's privacy policy for how it handles that.
We do not sell your personal data, and we do not share it for advertising.
Under UK and EU data protection law you may ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our using it. To exercise any of these, email info@vulnerableplanet.com.
You can delete your account yourself from within the app, or use the account deletion page. Deletion removes your account, your projects, your saved assessments and our copy of your payment records. Stripe, as our payment processor, keeps its own record of any transaction under its retention policy — we cannot delete that on your behalf.
If you think we have handled your data badly, you can complain to the data protection authority for your country. In the UK that is the Information Commissioner's Office, ico.org.uk.
These apps are not designed for or directed at children, and we do not knowingly collect data from anyone under 13.
All traffic is encrypted with HTTPS. Passwords are stored only as salted hashes. Login sessions expire automatically.
If we change this policy we will update the date at the top of this page.
Vulnerable Planet Ltd, registered in England and Wales, company number 15501422. Registered office: Unit 1, 22 Hatton Wall, London EC1N 8JH. Email info@vulnerableplanet.com