Privacy

You can make a post without signing in, and a draft never leaves your browser, signed in or not. The post is drawn on your own device, and your draft is kept in your browser's storage so that a refresh does not lose it. We receive nothing you type in the form.

To remove that draft, use Start over in the form, or clear this site's data in your browser.

The site's files are served by Cloudflare, Inc., a company based in the United States. Like any web host, it receives the technical details needed to deliver a page, such as your IP address and browser type, and keeps them for a limited time under its own policies.

We do not use advertising trackers. The analytics we do use are described under Analytics, below.

We use PostHog, Inc., a company based in the United States, to count how the site is used. We use its EU Cloud, so the data is held on servers in the European Union.

It records named steps only: which page was opened (for a published post's page, only that it was a post page, never which one), which kind of post was chosen, which step of the form was reached, and when a post was created, edited, downloaded, shared, published, updated, listed, opened from the list or copied from, or when a filter, the sign-in box or the support box was used. For the first page of a visit it also records which kind of site you came from: WhatsApp, Facebook, Instagram, Google, direct or other, never the address. With each step it records the kind of device and browser, such as Android and Chrome.

It also records how long a page was open, in ranges such as 10 to 30 seconds and counting only the time it was on screen, and how fast it loaded, as the standard page-speed numbers (for example, the time until the main content appeared). Neither records anything you typed or did on the page.

It never records what you type, your details, a post's content, a post's code or link, the address you came from, or what you filter by.

It sets no cookies and stores nothing on your device. It cannot tell one visit from another: each visit, and each reload of a page, counts as a new visitor with no name.

If your browser sends Do Not Track or Global Privacy Control, analytics is not loaded at all.

We have PostHog discard IP addresses, so they are not kept with the events. Like any service, it receives your address in order to answer the request, and handles it under its own privacy policy.

Cloudflare, which serves this site, may also run its own protection against automated traffic. When it does, it adds a short script to our pages, which runs in your browser and sends Cloudflare technical details about the browser, such as its type and settings, so it can tell people from automated tools. We do not receive what it collects. Cloudflare handles it under its own privacy policy.

Where you ask for a sign-in link or send feedback, Cloudflare Turnstile checks that the request comes from a person. It runs in your browser from Cloudflare's servers, and Cloudflare receives the technical details it needs for the check, such as your IP address and browser type, under its own privacy policy. It is not loaded on a page that does not need it.

Signing in uses your email address. You type it into the Sign in box, and we send a one-time sign-in link to it. We keep the address with your account, to keep you signed in, to connect your published appeals to you, and to contact you about your account if we need to. It is not shown on any post or appeal page. We do not ask for a password or a name.

Signing in keeps a session token in your browser so that you stay signed in. It is not used to track you.

Your account, your published appeals and your feedback are stored with Supabase, Inc., a company based in the United States, which runs our database and sign-in service. The data is held in its Singapore (ap-southeast-1) region.

The sign-in email is delivered by Resend, Inc., a company based in the United States. To deliver it, Resend receives your email address and the content of the email, which includes your one-time sign-in link, and keeps a record of the delivery under its own privacy policy.

Your drafts are not stored on your account. They stay in this browser, as they do when you are signed out.

You do not need an account to send feedback. We keep what you type, the thumbs up or down if you choose one, and the name or email you choose to add. Do not add anything you do not want us to have. It is stored with Supabase, as above, is never shown on the site, and is read only by us.

Feedback is sent only when you press the send button.

The notes you type in the AI panel are sent to our AI provider, currently DeepSeek, a company based in China. Only the notes are sent: not the rest of your draft, and not your email address or name.

Before the notes are sent, runs of 9 or more digits, such as account and phone numbers, are removed from them. This cannot catch everything, so do not put account details or other private information in your notes.

DeepSeek processes the notes on its own servers, under its own privacy policy and the law of China. Its policy decides how long it keeps them and whether it uses them to improve its services. If we change provider, this page and the AI panel will name the new one and the country it is based in.

We count how many AI drafts each account makes each day, to apply the daily limit.

A published appeal is shown on a public page at its own link: the title, description, amount, contact details and payout details you entered. Anyone with the link can see it, and anyone can save, copy or forward it.

An appeal is live for 30 days at most. You can close it earlier, and you give a reason (for example, goal reached), which its closed page shows with the date. While it is closed, its page does not show its details, but we keep the appeal stored for 30 days so that you can turn it back on within that time.

Thirty days after an appeal closes, its details are erased. We keep only its code, the date it closed and the reason, so that its link still says it is closed. If you delete your account, your appeals are closed and erased at the same time.

Publishing sends the appeal to our database only when you press Publish, and an Update sends the changes only when you press Update. Until then it stays in your browser.

If you include details about someone else, such as a patient, you must have their permission. Leave out anything you would not want strangers to keep.

If an appeal includes your information without your permission, write to hello@waseela.help with its link.

A published Missing or Blood post is shown on a public page at its own link, as you made it: everything on the post, including a Missing post's photo. Anyone with the link can see it, and anyone can save, copy or forward it. Publishing needs you to be signed in.

The photo you choose is read and edited on your own device. It is uploaded only when you press Publish or Update, after your browser has compressed it, and what is uploaded is the photo the post shows: edited, or as it was if you did not edit it. It is stored encrypted, apart from the post, and is deleted with the post. A small copy of it, a thumbnail made in your browser the same way, is stored with it for Active posts (below), and is deleted with it.

A Missing post is live for 30 days at most. You can close it earlier, and you can turn it back on within 30 days of closing it. Thirty days after it closes, its details and its photo are erased; we keep only its code, the date it closed and the reason, so that its link still says it is closed.

A Blood post closes an hour after its needed-by time, which can be at most 30 days after you publish it, and it is erased at that moment, with everything it held. We keep only its code and the date it closed, so that its link still says it is closed. If you close a Blood post yourself, it is erased at once. A Blood post cannot be turned back on. An Update before it closes may move the needed-by time, which moves the closing.

If you delete your account, your posts are closed and erased at the same time. A post is sent to our database only when you press Publish or Update; until then it stays in your browser.

If a post includes details or a photo of someone else, you must have the right to share them. Leave out anything you would not want strangers to keep. If a post includes your information without your permission, write to hello@waseela.help with its link.

Active posts is a public list of Missing posts and blood requests. A post is in it only if you turn that on, when you publish or later in My appeals, and you can turn it off at any time. Nothing is listed by default, and a donation appeal is never listed. A listed post appears at once, newest first.

The list shows, for each post: the title, the city and the area, the kind of thing that is missing or the blood types wanted, when it was last seen or when it is needed by, a reward if you offered one, the bags and hospital of a blood request, how long ago it was published, and a thumbnail of a Missing post's photo. It never shows contact details, payout details, the description or the full photo, which are on the post's own page only. Anyone can see the list and filter it by city, area, kind and blood type.

A post leaves the list when you turn it off, when it closes, and, for a blood request, at its needed-by time. Turning a closed Missing post back on does not put it back in the list; you choose again.

The lists of cities, areas and hospitals that the forms suggest are built from OpenStreetMap data, © OpenStreetMap contributors, available under the Open Database Licence (openstreetmap.org/copyright). They are files served with Waseela itself: choosing a name from them sends nothing to OpenStreetMap or to anyone else. The suggestions only help you type; whatever you type or choose is yours, and Waseela does not check it against anything.

Only the providers named on this page, to run the service, and anyone the law requires us to give it to. We do not sell your information, and we do not share it with advertisers.

Your browser keeps your draft until you remove it. We keep your account until you ask us to delete it, and feedback until we delete it. We keep a published appeal while it is live and for 30 days after it closes, then erase its details and keep only its code, the date it closed and the reason. A Missing post, and its photo, is kept in the same way. A Blood post is erased when it closes, an hour after its needed-by time, and we keep only its code and the date it closed. If you delete your account, we erase your appeals' details at once. Our providers keep technical logs for limited periods under their own policies, and deleted data can remain in backups for a limited time.

You can ask to see the information we hold about you, to correct it, or to delete it, including your whole account and everything stored with it. Write to hello@waseela.help from the email address you sign in with. We will reply as soon as we reasonably can.

Signing in is for adults. Do not sign in if you are under 18.

Of a published appeal, the title, the category, the city and the amount (with its currency) are stored readable, so that we can search appeals; they are what its page shows to anyone with the link. The description, the bank and wallet details, the contacts and the payment QR are stored encrypted, as is feedback. Of a published Missing or Blood post, the title (for a Blood post, its blood types and hospital), the city and, for a Blood post, the needed-by time are stored readable, and so are, so that Active posts can be filtered, a Missing post's area and kind (person, pet or item), a Blood post's blood types (and whether any type will do), and whether the post is listed; everything else on the post is stored encrypted, and a Missing post's photo and its thumbnail are stored encrypted on their own. Active posts opens an encrypted post only to read the few fields a card shows. The key that opens them is kept separately from the database, so a copy of the database on its own does not show them. Our service has to open them to show an appeal at its link and to let us read feedback, so this protects against the database being exposed, not against our own service being compromised. Your email address is held by our sign-in service in the usual way, not in this encrypted store.

We also use the protections our providers offer, including database rules that let each account read only its own appeals. No system is completely secure, and we cannot promise that information will never be exposed.

We may update this page. If a change affects what we collect or who receives it, we will say so on the site.

hello@waseela.help