Privacy Policy

Last updated: March 2026

This Privacy Policy explains how One Good Act (onegoodact.today) collects, uses, and protects your personal data when you use our website.

1. Who is responsible for your data?

The data controller is Tomek Plata, operating the website onegoodact.today. For any questions or requests regarding your personal data, contact us at: hello@onegoodact.today.

2. What data we collect

When you sign in and pledge to a daily good act, we collect:

Your email address
Your name (as provided by Google or Facebook)
Your pledge records (which daily act you joined and when)

We do not collect any payment information, location data, or data beyond what is listed above.

3. Why we collect your data and legal basis

We collect your data solely to:

Authenticate you as a user (so your pledge is counted once per day)
Display your first name in the confirmation message
Count and display the number of participants for each daily act

The legal basis for processing is the performance of a service you voluntarily requested (Article 6(1)(b) GDPR).

4. How long we keep your data

Your account and pledge records are stored for as long as you use the service. You can request deletion of your data at any time (see Section 6).

5. Who has access to your data

Your data is stored securely using Supabase (our database and authentication provider), which acts as a data processor on our behalf. We do not sell, rent, or share your personal data with any third parties for marketing purposes.

6. Your rights

Under GDPR, you have the right to:

Access — request a copy of the data we hold about you
Correction — request that inaccurate data be corrected
Deletion — request that your account and all associated data be permanently deleted
Objection — object to the processing of your data

To exercise any of these rights, send an email to hello@onegoodact.today. We will respond within 30 days.

7. Cookies and local storage

We use browser local storage only to temporarily remember your intent to pledge (so it is completed automatically after you sign in). No tracking cookies or advertising cookies are used.

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.