Privacy at On the Bell

Accounts and Google sign-in

We store your account email, display name, selected town and account status. Supabase manages authentication and stores account information. If you choose Google sign-in, Google shares basic identity information with Supabase, including your email, name, account identifier and available profile information. We use this information to create or sign you into your On the Bell account.

Profile photos

If you upload a profile photo, we send a processed copy to OpenAI for a safety check before accepting it. We remove embedded image metadata before sending it. Photos that pass the check are stored in Supabase and displayed in your account and navigation bar.

Contributions and saved items

We store the listings, images, contact details, change requests and reports you submit. Visitors can see published listings, their author names and the information you include. Your saved items and expressions of interest belong to your account and are not public lists.

Moderators review contributions, reports and change requests. Administrators can view member information and manage account access. We record staff decisions and account restrictions.

Services we use

We use Supabase for accounts, database records and uploaded images; Vercel for hosting and website analytics; and Resend for authentication emails. These providers process information needed to deliver those services.

Vercel Web Analytics measures page visits and information such as browser, device, referring page and approximate location. Sentry helps us investigate errors and performance problems, including sampled session replays.

We also import Sentry issue data into PostHog to help investigate problems across these services. This diagnostic integration uses the existing Sentry collection and is separate from the optional browser analytics described below.

If you send a bug report, Sentry receives your message, page address, optional name and email, any screenshot you attach, and associated replay information when available. Please check attachments before sending them.

Optional analytics and diagnostics

If you accept optional analytics, PostHog helps us understand page visits, returning visits, referring websites, campaign sources and approximate location inferred from your internet connection. We also measure listing views, saves, shares, website clicks, selected towns, filter changes, additions to My plans, and supported signup and contribution completions. A selected town is a browsing preference, not evidence of where you live. My plans records interest, not a booking or RSVP.

After you accept, PostHog stores a random browser identifier and session information in browser storage to recognise return visits. In this browser integration, we do not link this identifier to your member account or send your name, email, search text or contribution contents to PostHog. We remove URL queries and fragments, keep only the referring website, and allow limited campaign labels. PostHog processes this data in its US Cloud service.

Your choice also covers masked recordings of page interactions and limited error diagnostics. We mask page text and inputs and block images and other media in recordings. We exclude private account, sign-in and staff pages from recordings and these error diagnostics. We do not collect console logs, network request or response bodies, or custom form contents through PostHog. We collect a limited signal when repeated clicks may indicate frustration.

PostHog uses AI to analyse these masked recordings and help us find broken or frustrating experiences. We do not link recordings or error diagnostics to your member account, name or email. We ask for a new choice before extending an earlier analytics acceptance to recordings and diagnostics. An earlier decline stays in effect.

You can change your choice below. Declining or withdrawing stops optional PostHog browser collection and removes its stored analytics identifiers. We respect Do Not Track and Global Privacy Control browser signals. Clearing browser storage removes your choice and identifier; another browser or device has its own choice. These controls apply to optional PostHog browser collection. The Vercel analytics, Sentry diagnostics and Sentry issue imports described above continue to operate.

Optional PostHog analytics and diagnostics are not enabled here.

Cookies and other websites

We use cookies to maintain your sign-in session and browser storage to remember your selected town and analytics choice. Optional PostHog analytics uses browser storage after you accept. You can clear them through your browser; clearing authentication cookies signs you out.

Directory maps load data from OpenFreeMap. Links to Google Maps and other websites take you to services with their own privacy practices.

Your choices

You can edit your display name and town from Your account, remove saved items, and manage your contributions from My listings. Archiving a contribution removes it from public display but retains its stored record.