Privacy Policy
This Privacy Policy describes how ETV1gene.com (“Site,” “we,” “us”) handles personal information. It is provided for transparency and is not legal advice.
1. Who we are
- Site: ETV1gene.com (ETV1 Community Beacon)
- Operator / controller: ETV1 Community Beacon (operator of ETV1gene.com)
- Contact for privacy questions: For policy questions, contact the site operator via the email used for your Hostinger/account correspondence until a public contact address is published on this page.
We provide educational and community resources primarily about ETV1-related prostate cancer. We are not a healthcare provider and do not use this Site to deliver clinical care.
2. Information we collect
2.1 Information you provide
| Category | Examples | When |
|---|---|---|
| Account / auth | Email, password hash (or magic-link tokens), display name | Registration / login (Supabase Auth) |
| Profile | Optional bio, avatar, preferences | If you edit your profile |
| Forum content | Thread titles, posts, replies you publish | Forum use |
| Support / contact | Messages you send to the site operator | Email or forms |
| Donation-related | Billing details handled by Stripe (we may receive limited metadata: amount, status, email if provided) | When donations are enabled |
We ask you not to post sensitive health details that identify you or others in public forum threads (e.g., full name + detailed medical history). See Community Guidelines.
2.2 Information collected automatically
| Category | Examples | Technology |
|---|---|---|
| Usage / analytics | Pages viewed, approximate location (country/region), device/browser type, referral source | Google Analytics 4 — Measurement ID G-XJ1MPJCP87 |
| Technical logs | IP address, timestamps, error logs | Hosting / application logs |
| Cookies / similar | Session cookies, preference cookies, analytics cookies | Browser storage |
2.3 Information from service providers
We use third parties who process data on our behalf (see Section 5). They may receive or generate technical and account-related data as needed to provide their services.
3. How we use information
We use personal information to:
- Operate, secure, and improve the Site
- Authenticate accounts and provide forum features
- Moderate community content and enforce Terms
- Understand aggregate traffic and content performance (GA4)
- Process donations when Stripe is enabled in live mode
- Respond to messages you send us
- Comply with law and protect rights, safety, and integrity of the community
We do not sell your personal information for money. We do not use forum content to provide you medical advice.
4. Cookies and similar technologies
We may use:
- Essential cookies — login session, security, load balancing
- Preference cookies — remembering UI settings
- Analytics cookies — GA4 measurement
You can control cookies via browser settings. Blocking essential cookies may break login or forum features.
We do not currently display a separate cookie consent banner; you can control cookies through your browser settings.
GA4 may use Google technologies subject to Google’s privacy terms. GA4 is configured with measurement ID G-XJ1MPJCP87. Data retention and related analytics settings are managed in the GA4 admin console and may be updated from time to time.
5. Service providers / processors
| Provider | Role | Data involved (typical) |
|---|---|---|
| Hostinger | Website hosting for the React SPA | Server logs, transmitted content |
| Supabase | Authentication, database (e.g., forum tables: categories, threads, posts), possibly storage | Account identifiers, forum content, auth metadata |
| Google Analytics (GA4) | Traffic analytics | Pseudonymous usage data; Measurement ID G-XJ1MPJCP87 |
| Stripe | Payment processing for donations (when live) | Payment card data handled by Stripe; we may see donor email, amount, payment status |
Provider privacy links:
- Hostinger privacy: https://www.hostinger.com/privacy-policy
- Supabase privacy: https://supabase.com/privacy
- Google privacy: https://policies.google.com/privacy
- Stripe privacy: https://stripe.com/privacy
We may add or replace providers; material changes will be reflected in an updated policy.
6. Forum posts and public visibility
- Forum content may be visible to other registered users and, depending on settings, more broadly.
- Do not post passwords, government IDs, or another person’s private health information without permission.
- If you delete a post, residual copies may remain in backups or moderation logs for a limited time as needed for operations and safety.
7. Donations and Stripe
While the Site may show donation CTAs:
- Live payment processing is used only when a live Stripe Payment Link (or equivalent) is enabled by the operator; test-mode links must not be used for real payments.
- Card numbers and full payment credentials are processed by Stripe, not stored on our servers.
- Receipts and tax documentation practices will be described when live donations are enabled. This Site does not claim 501(c)(3) or other tax-exempt status on this page; treat donations as non–tax-deductible unless the operator separately publishes verified tax status and receipt guidance.
8. Retention
| Data type | Intended retention |
|---|---|
| Account credentials / profile | Until you delete the account or we close it for policy or legal reasons, plus a short backup period for recovery and security |
| Forum posts | Until deleted by you or moderators, subject to backups and moderation logs for a limited time |
| Analytics (GA4) | Per the GA4 property’s configured retention settings |
| Server logs | For a limited operational period as needed for security, debugging, and abuse prevention |
| Donation records | As needed for accounting, dispute handling, and applicable recordkeeping when live donations are processed |
| Support emails | As long as reasonably needed to respond and maintain related records |
9. How we share information
We share personal information only:
- With processors listed above (to run the Site)
- If required by law, subpoena, or to protect safety and rights
- In connection with a reorganization of the operator entity, with notice where required
- With your direction or consent
We do not share your data with advertisers for cross-context behavioral advertising. No advertising program of that kind is currently planned; if that changes, this policy will be updated first.
10. Security
We use reasonable administrative and technical measures (HTTPS, access controls on Supabase/Hostinger, least-privilege practices). No method of transmission or storage is 100% secure. Report suspected security issues using the same contact method described above for policy questions.
11. Children’s privacy
The Site is intended for adults and families dealing with adult cancer contexts. We do not knowingly collect personal information from children under 13 (or under 16 in jurisdictions that require a higher age for consent without parental authorization).
If you believe a child has provided personal information, contact the site operator using the method described above so we can delete it.
Sexual or exploitative content involving minors is strictly prohibited and will be removed and may be reported to authorities.
12. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to certain processing.
- Account / forum: Use in-product settings where available, or contact the site operator as described above.
- Analytics: Use browser cookie controls and, where available, Google’s published analytics opt-out tools or similar browser features.
- Marketing email: We do not currently run a marketing email list. If that changes, unsubscribe links will be provided.
We will not discriminate against you for exercising privacy rights where prohibited by law. We may take reasonable steps to verify your identity before fulfilling certain requests.
Additional notices for specific jurisdictions (for example California or GDPR-style disclosures) may be published on this page as needed; none are separately published at this time.
13. International transfers
Hosting and processors may store or process data in the United States and other countries. If you access the Site from outside the U.S., your information may be transferred to jurisdictions with different data-protection laws. Where required, we rely on appropriate contractual or other safeguards offered by our processors.
14. Changes to this policy
We may update this Privacy Policy. The “Effective date” will change when a new version is published. Material changes will be highlighted on this page and/or announced via a site notice (and, where practical, notice to registered users).
15. Contact
Operator: ETV1 Community Beacon (operator of ETV1gene.com)
For policy questions, contact the site operator via the email used for your Hostinger/account correspondence until a public contact address is published on this page.