Privacy policy

Effective date: November 3, 2026

Beacon of the Throne is a community restroom finder. This policy describes information handled by our current web app. It is not a medical service.

Information we collect and why

• Accounts: your email, account identifier, authentication records, and password credentials processed by Supabase. We use these to authenticate members, recover access, and secure accounts. Passwords are handled by our authentication provider; we do not publish them or include them in public listings.
• Contributions: bathroom names, addresses, coordinates, access and accessibility details, ratings, comments, and submission dates. We use these to provide listings, moderate content, and calculate ratings.
• Reports and moderation: issue reports, account restrictions, and moderation decisions. These help address inaccurate information, abuse, and security concerns.
• Location: with your browser permission, we use your current coordinates on your device to sort nearby bathrooms. We do not create a travel history. If you choose “Use my location” when adding a bathroom and submit it, those coordinates become part of that location’s record and may be published after approval. Only submit coordinates for an actual bathroom open to visitors.
• Support: information you send to our support email, including your email and message, to answer your request. Do not send medical records, passwords, reset links, payment information, or other unnecessary sensitive information.
• Technical information: hosting and authentication providers may process IP addresses, browser information, request timestamps, and error logs to operate and protect the service.

What other people can see

Approved bathrooms, ratings, and approved written reviews are public. Public records may contain a contributor account identifier, but the app does not display member email addresses with contributions. Pending/rejected content and reports are restricted to authorized members and moderators as applicable. Never put a person’s private information in a public listing or review.

Service providers and external maps

We use Supabase for authentication and database services, and ChatGPT Sites hosting infrastructure for the website. Their providers process information to supply those services. Map images come from OpenStreetMap; map requests reveal your IP address and viewed map area to the map provider. Directions open Google Maps, which receives the destination and handles your use under its own policies. Browser assets may also be fetched from unpkg’s CDN. Review Supabase privacy, OpenAI privacy, OpenStreetMap privacy, and Google privacy.

Local storage and installation

The app stores authentication session information in your browser to keep you signed in. Installing the web app adds a home-screen entry. Its offline cache holds a generic offline page and logo, not bathroom listings or reviews. You can sign out, clear site data, uninstall the home-screen app, or revoke location permission in your browser. Clearing local data does not delete your server-side account.

Retention and account deletion

We keep account information while the account exists and contributions while they are part of the service. Use Account → Delete account to permanently remove your account. This removes your reviews, reports, blocks, and bathroom listings you submitted, together with reviews attached to removed locations. Deletion also revokes your sign-in sessions. Non-identifying moderation history and provider security logs or backup copies may remain for their operational retention periods or where legally required. Support emails are retained only as needed to handle requests, address disputes, and meet legal obligations; you can request their deletion.

Your choices and requests

You can browse without an account, decline location permission and search manually, report inaccurate content, block contributors while signed in, and delete your account. For access, correction, deletion, or other privacy questions, contact rbmcghan@gmail.com. We may need to verify that a request concerns your own information before acting. Rights and exceptions depend on applicable law.

Children, advertising, and changes

Member accounts are intended for adults 18 and older. We do not intentionally solicit children’s personal information. We do not sell member data or use advertising/tracking SDKs in this version. If our practices change, we will update this policy and seek consent where required. A revised date will identify updates.