Privacy Policy

bccsrtool.ca is committed to being transparent about how this site works.

What Data Is Collected

Accounts are optional. If you create an account, Supabase processes your email address, password, authentication sessions, and account timestamps. Passwords are stored as hashes by Supabase Auth. The profile database stores your user ID, optional display name, profile creation timestamp, and default chemical sorting preference. This information is used to provide sign-in, profile editing, email verification, and password resets.

If you continue with Google, Google authenticates your account and shares your basic identity information, including your email address and name, with Supabase. Your Google password is not collected by this website. Your Google name may initialize a new profile's display name; you can edit it on the account page. This sign-in flow does not request access to your Gmail messages or Google Drive files.

Assessment inputs are processed in your browser. If you choose Save to account, the assessment name and inputs—including site names, land use selections, factor choices and justifications, areas, samples, contaminant choices, concentrations, units and non-detect reporting limits—are uploaded to Supabase and linked to your user ID. Legacy assessment metadata, if present, may also be included. Account saves are private to the signed-in owner and can be reopened on another device. Original lab files and exported reports are not uploaded. Results are recalculated from saved inputs using the tool's current standards data.

To support resume and navigation features, progress may be saved locally in your browser using browser storage. This local progress stays on your device and can be cleared by starting a new assessment, clearing your browser storage, or using browser privacy controls.

The working assessment is kept locally in the browser and associated with the active account. Signing out or changing accounts clears that working copy and its local recovery backups; assessments saved to your account remain in Supabase. Save unfinished work to your account before signing out. Guest progress is local to the browser and may be carried into the first account you sign into. Clear guest progress when using a shared device.

Analytics

The screening and information pages load Google Analytics to measure site usage. Google may process technical information such as device and browser details, page visits, and identifiers. Account and password-reset pages do not load the site's Google Analytics script.

If you prefer not to be included in analytics, you can disable JavaScript or use a browser extension that blocks analytics tracking.

Cookies and Local Storage

Browser storage remembers assessment progress, interface preferences, and Supabase sign-in sessions. Google Analytics may use cookies on pages where it is loaded. Clearing site storage removes local progress and locally stored sign-in sessions, but does not delete your server-side account.

Third-Party Services

When enabled, Cloudflare Turnstile protects email sign-in, account creation, and password-reset requests against automated abuse. Cloudflare may process technical browser and device information to perform security checks. A short-lived verification token is sent to Supabase for validation; your password and assessment inputs are not sent to Cloudflare by this integration. See Cloudflare’s Privacy Policy.

This site is hosted on GitHub Pages. GitHub may collect standard server access logs as part of its hosting infrastructure. For details, refer to GitHub's privacy policy at github.com/site/privacy.

Supabase provides account authentication, profile storage and saved assessment storage. Resend processes recipient email addresses and verification or password-reset messages to deliver account emails. These providers may retain service and delivery logs. External JavaScript libraries are delivered through jsDelivr. Service providers may process information outside Canada.

Retention and Account Requests

Account saves are retained until you delete them from Saved assessments or your account is deleted. Account and profile information is retained until the account is deleted. You can download your profile, preferences, and saved assessments from Saved assessments, or permanently delete your account from Settings after confirming your sign-in email address. For other access or deletion requests, email [email protected] from your account email address. Additional verification may be needed before a request is completed. Deleting an authentication account also deletes its linked profile and saved assessments; provider logs and backups may remain subject to the providers' retention practices.

Your Rights

You can edit your display name and chemical sorting preference in Settings, download your account data from Saved assessments, delete your account in Settings, and reset your password using the sign-in page. For other account-information requests, use the contact address above. Clearing browser storage does not delete account saves. To remove locally saved assessment progress and the local recovery copy made when opening an account save, clear your browser storage for this site or start a new assessment.

Contact

For questions about this tool or these policies, contact Geoffrey Lee through LinkedIn.