Privacy & data

What we collect and why

• Accounts: email, account identifier, role, and verification information to sign you in and manage access; Firebase Authentication handles sign-in credentials.
• Profiles and listings: information and photos you submit about yourself, an institution, an organ, or an event.
• Activity: practice requests, times, purposes, decisions, changes, event signups, questions, answers, and reviews to run these features.
• Privacy requests: your account identifier, request details, status, and administrator response so we can review and answer privately.
• Optional analytics: actions, page paths, timestamps, referrer website, browser-generated visitor/session identifiers, and your account identifier and role when signed in; these help us understand feature use.

New analytics records exclude URL query text; older records may contain search URLs collected before this notice.

Who can see your information

• Public: profile information, uploaded photos, published listings and events, organ reviews, and answered listing questions; do not put private details in these fields.
• Signed-in users: host reviews of organists and completed-session counts; a contact email is visible to signed-in users only when you enable its visibility.
• You and the relevant institution: reservation details, change requests, and event signups; unanswered questions are available to their author and the listing owner.
• Restricted records: private organ notes are owner-only in the app, while privacy requests are available to the account holder and authorized administrators.

Authorized operators and service providers process records to operate, secure, and support OpenOrgan.

Location, maps, and service providers

Using maps, address search, or driving routes sends relevant requests to Google Maps services; your selected starting coordinates also reach OpenOrgan’s route service and may be cached temporarily for route calculations.

Your device location is requested only after you choose “Use my location,” and you can enter an address instead.

Google Firebase provides account, database, file-storage, and hosting services, and Resend sends institution-verification emails when configured.

Hosting and other service providers may process network and device information for delivery and security; external photos, organizer links, and payment services have their own privacy practices.

OpenOrgan does not process card details; any payment is arranged directly with the institution.

Google privacy policy · Resend privacy policy

Browser storage and your choices

Sign-in state, unfinished account setup, and guide preferences may be stored in your browser; optional analytics use separate visitor/session identifiers, with sessions renewed after 30 minutes of inactivity.

Optional usage analytics are off unless you enable them below, and remain off when your browser sends Global Privacy Control or Do Not Track.

Turning analytics off clears their browser identifiers and stops new optional events; it does not remove records already stored on the server.

Use your profile to edit public information or hide your contact email, and your dashboard to manage reservations and event signups.

Retention and security

Account and activity records currently remain stored until removed through available controls or by an administrator; there is no automatic expiry for these records.

We use authenticated access and database/storage permissions to restrict records, but no online service can guarantee complete security.

Request access, correction, or deletion below; an administrator will explain any records that need to remain for an active reservation, dispute, security, or applicable legal obligation.

Private data requests

Sign in to the affected account, submit your request, and return here to read the administrator’s private response.

A deletion request does not immediately delete your account; the administrator must review and complete the work before confirming it.

You can also use this form for a privacy question or to report information about a child or another person; avoid including sensitive information until the administrator explains what is needed.

Checking your account...

Changes to this statement

Updates will appear on this page with a revised date; review it when you use a new feature or change your privacy choices.