Privacy Policy

The short version

You can browse pandals, the map, the schedule, and build a route on Dugga-Elo without ever creating an account — that data stays only in your own browser's local storage on your own device. If you do create an account (email/password, or Google/Facebook sign-in), we store what's needed to run the features you use — saved pandals, routes, GPS-verified check-ins, and milestones — in our Supabase database, tied to your account. We don't sell your personal data.

Account & authentication information

Creating an account is optional and only needed for saving pandals/routes permanently, GPS check-ins, and milestones. Depending on how you sign up, we (via our authentication provider, Supabase Auth) store:

Email & password: if you sign up with email, your password is handled entirely by Supabase Auth and never stored by us in plain text.

Google Sign-In / Facebook Sign-In: if you sign up with Google or Facebook, we receive your name and email address from that provider to create your account — we don't receive your Google or Facebook password.

Display name: shown on your account and, where relevant, on routes you choose to share.

If you don't create an account

Saved pandals, a route you've built, "Puja Journey" flags, and packing checklist progress are kept entirely in your browser's localStorage. This is never transmitted to our servers. Clearing your browser data, switching devices, or using private/incognito mode will reset these.

If you create an account

Signing in stores your session in your browser's local storage (via Supabase Auth) so you stay logged in. Once signed in, the following are stored on our servers, tied to your account, and only accessible by you (enforced by database-level access rules):

Saved pandals; routes you build and choose to save (including a shareable route link, if you generate one); GPS check-ins (see below); and milestones/achievements based on your check-in and route activity.

Location data

Dugga-Elo uses your device location in two distinct ways:

"Find Pandals Near Me": requested only when you tap that button, used entirely in your browser to sort pandals by distance, and never sent to or stored on our servers.

GPS pandal check-in: available to signed-in users. When you tap "Check in" at a pandal, we take a single GPS reading (latitude, longitude, and accuracy) and send it to our server to confirm you're within that pandal's check-in radius. If verified, that reading is stored as part of your check-in record, tied to your account, so it can count toward your Puja Journey and milestones.

Suggestion / contact form

The "Got a suggestion?" form on the homepage sends the name, email, and message you enter to Netlify Forms, the service that processes form submissions for this site, so we can read and respond to it.

Analytics

We use Google Analytics 4 (GA4) to understand aggregate usage — page views, searches, pandal saves, route creation/sharing, map opens, location-permission results, and outbound link clicks. This uses standard Google Analytics cookies, isn't used to identify you personally, and isn't combined with your account data.

Cookies & local storage

Google Analytics sets its own cookies as described above. Supabase Auth stores your session in your browser's local storage (not a traditional cookie) so you stay signed in. If you're not signed in yet but ask to save a shareable route, a short-lived marker (cleared automatically after 30 minutes, or once used) is kept in local storage so we can finish saving your route right after you sign in.

Third-party services

Dugga-Elo relies on: Supabase (accounts, authentication, and database storage); Google (Sign-In, Analytics, fonts, and Google Maps directions links); Facebook (Sign-In and share links); Netlify (hosting and the contact form); CARTO and OpenStreetMap (interactive map tiles); and share links to WhatsApp, X, and Instagram. Some pandal photos are credited to Wikimedia Commons. Each of these is a separate service with its own privacy policy once you interact with it — we don't control what they do with your data beyond what's described here.

Data sharing

We don't sell your personal data. Information is only shared with the service providers above as needed to run the features they support (for example, Supabase stores your account data, and Google/Facebook process sign-in). We don't share your data with anyone else for their own marketing purposes.

Security

Account data in Supabase is protected by row-level access rules, so your saved pandals, routes, check-ins, and milestones are only readable and writable by you. The site is served over HTTPS. Dugga-Elo doesn't collect or store payment or financial information.

Data retention

Account data is retained for as long as your account exists. Guest (no-account) data stays only in your browser's local storage until you clear it yourself. We don't currently run an automatic deletion schedule beyond this.

Account & data deletion

Dugga-Elo doesn't yet have a self-service "delete my account" option in the product. If you'd like your account and the data associated with it deleted, email us at admincontactinfo11@gmail.com and we'll handle the request.

Children's privacy

Dugga-Elo is a general-audience travel guide and isn't directed at children. We don't knowingly collect data from children. If you believe a child has created an account, contact us using the details below and we'll address it.

Changes to this policy

If this policy changes, we'll update the effective date at the top of this page.

Contact

Questions about this policy or your data? Email us at admincontactinfo11@gmail.com, or use the suggestion form on the homepage.