Privacy Policy

Last updated: March 12, 2026

1. Who We Are

ImStranded.org ("we," "us," "the Site") is a volunteer-run, open-source crisis response platform operated by community volunteers. The Site is not a registered company, charity, or legal entity. It is a free public resource built to connect stranded travelers with help during the Gulf crisis.

2. What We Collect

When you use ImStranded, we may collect:

Account info: Email address, display name, and avatar via Google OAuth, Telegram, or X authentication.
Posts and registrations: Location data, names, contact details, needs, and descriptions you voluntarily submit when offering a room or registering as stranded.
Match and success stories: Information shared when users match with each other or share their journey home.
Device data: GPS coordinates (only when you explicitly tap the GPS button), browser type, and screen size for responsive layout.

3. We Do Not Share or Sell Your Data

We do not share, sell, rent, trade, or otherwise distribute your personal information to any third parties. Period. Your data is used solely to operate this crisis response platform.

4. How We Use Your Data

Your information is used exclusively to:

Display your post or stranded registration on the map so others can help you or contact you.
Facilitate matches between stranded travelers and room offers.
Verify your identity for trust and safety purposes.
Moderate content and prevent spam or abuse.

5. Data Storage

Your data is stored in Supabase (hosted on AWS infrastructure) with row-level security policies. Only you can edit or delete your own posts. Admins and moderators can remove flagged or abusive content.

6. Your Rights

You can at any time:

Delete your posts from the My Room or My Status dashboard.
Delete your account entirely from the Profile page — this removes all your data permanently.
Request data export by contacting us via our community channels.

7. Third-Party Services

We use the following third-party services:

Supabase — database and authentication
Google OAuth — sign-in
Nominatim (OpenStreetMap) — location autocomplete
AviationStack — flight disruption data
Vercel — hosting

Each of these services has its own privacy policy. We do not control their data practices.

8. Cookies

We use only essential authentication cookies (Supabase session tokens). We do not use analytics cookies, advertising cookies, or tracking pixels.

9. Children

This Site is not directed at children under 13. We do not knowingly collect information from minors.

10. Changes

We may update this policy as the platform evolves. Continued use of the Site after changes constitutes acceptance of the updated policy.

11. Contact

For privacy questions, reach us via Telegram or X / Twitter.