BhutanWiki

Privacy Policy

Last updated: April 2026

Our Commitment

BhutanWiki is built by and for the Bhutanese community, including refugee and diaspora populations. We understand that contributor safety is paramount and that some users face real risks from political repression. Our privacy practices reflect this responsibility.

What We Collect

Readers (no account)

We collect standard web server logs (page visited, timestamp, browser type) through our hosting provider (Vercel). We do not use tracking cookies, advertising pixels, or third-party analytics that identify individuals.

Contributors (with account)

When you create an account or set up a display name to edit, we collect:

  • Display name — chosen by you (pseudonyms are welcome and encouraged)
  • Email address — optional, used only for edit notifications and password reset
  • Edit history — your contributions are attributed to your display name
  • IP address hash — a one-way cryptographic hash of your IP address is stored with each edit for anti-vandalism purposes only. The hash cannot be reversed to reveal your actual IP address. These hashes are automatically deleted after 30 days.

What We Do NOT Collect

  • We never require real names, government IDs, or identity verification
  • We do not store raw IP addresses (only irreversible hashes, deleted after 30 days)
  • We do not sell, share, or monetise any user data
  • We do not use advertising or third-party trackers

How We Use Your Information

  • Display name: Shown publicly on your contributions (you choose what it says)
  • Email: Watchlist notifications, edit alerts, password reset — never shared with third parties
  • IP hashes: Anti-vandalism detection only — auto-deleted after 30 days
  • Edit history: Maintaining article version history (core wiki functionality)

Data Storage

Your data is stored on Supabase (PostgreSQL database hosted in the United States). The website is served through Vercel. Both providers maintain industry-standard security practices.

Right to Vanish

BhutanWiki supports a “right to vanish.” Any contributor may request:

  • Complete deletion of their account and personal information
  • Anonymisation of all their edit attributions (replaced with “Anonymous”)
  • Removal of their email address from all systems

To exercise this right, email noreply@bhutanwiki.org from the email associated with your account, or describe your display name. We will process requests within 7 days.

Tor and VPN Access

BhutanWiki does not block access from Tor exit nodes or VPN services. We recognise that some contributors require anonymity tools for their personal safety.

European Users (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

  • Legal basis for processing: We process your data based on (a) your consent (cookie banner), (b) legitimate interest (anti-vandalism, platform integrity), and (c) contractual necessity (providing the wiki service to registered contributors).
  • Right of access: You may request a copy of all personal data we hold about you.
  • Right to rectification: You may request correction of inaccurate personal data.
  • Right to erasure: You may request deletion of your personal data (see “Right to Vanish” above).
  • Right to data portability: You may request your data in a machine-readable format.
  • Right to object: You may object to processing based on legitimate interest.
  • Right to restrict processing: You may request that we limit how we use your data.

To exercise any of these rights, email noreply@bhutanwiki.org. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Data transfers: Your data is stored on servers in the United States (Supabase, Vercel). By using BhutanWiki, you consent to the transfer of your data to the United States. We rely on standard contractual clauses and the service providers' data protection measures to safeguard international transfers.

California Users (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:

  • Right to know: You may request what personal information we collect, use, and disclose.
  • Right to delete: You may request deletion of your personal information.
  • Right to opt-out of sale: BhutanWiki does not sell your personal information. We have never sold personal data and have no plans to do so.
  • Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, email noreply@bhutanwiki.org. We will verify your identity before processing requests.

Categories of personal information collected: Identifiers (display name, email if provided), internet activity information (IP hash, edit history). We collect this information for the purposes described in this policy. We do not collect sensitive personal information as defined by the CCPA.

Cookies and Tracking

BhutanWiki uses only essential authentication cookies and browser local storage for user preferences. We do not use advertising, analytics, or third-party tracking cookies. For full details, see our Cookie Policy.

Children

BhutanWiki is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. If we make material changes, we will provide notice through the website.