Privacy notice

We use the information described here to operate RoundStone and its online platform, Ripple. These are working names and may change.

Mission participation

You can browse missions, record an intention, and report a completion without registering or giving us your name or email. We store the mission, whether you recorded an intention or a self-reported completion, and the time of the report. When you participate, we record that you confirmed you are aged 18 or over; we do not ask for or store your date of birth. We do not use these records to identify unique people and do not collect photographs or details about people involved in a mission.

If you choose, you can also provide a short reflection and say whether you would do something similar again, experienced a difficulty, or were prompted by this site. You can optionally identify your broad pilot area as High Peak/nearby or elsewhere in the UK; we do not request a postcode for this. Please do not include names, contact details, sensitive information, or anything that identifies another person. Optional reflections are available only to the project administrator and are not published. Aggregate participation counts are displayed as self-reported, not independently verified.

A mission reminder is optional and requires its own explicit request. If you ask for one, we store the email address, selected mission, chosen delay, and confirmation/sending status to deliver a single message. We send a separate confirmation link first; the reminder is not sent unless you confirm within 48 hours. Unconfirmed requests are deleted by the hourly reminder task after the link expires. Confirmed reminder records are deleted 30 days after sending or cancellation. A reminder does not subscribe you to any other email.

Email updates

If you use the Join form, your email, optional first name, optional postcode area, selected interests and consent record are stored in our database. We send a confirmation email through Resend; your address remains pending until you confirm. We also send the project team a signup notification. The current release records consent for future general dispatches and, separately, optional local-operation notices; it does not yet send bulk dispatches. Signing up is separate from anonymously accepting or reporting a mission.

We plan to review inactive supporter records after 24 months as a starting point, but the retention schedule and applicable exceptions must be confirmed before launch. Contact the project administrator to request access, correction or deletion; requests are handled individually.

We do not sell personal information. You can unsubscribe using the link in an email or request access, correction or deletion by contacting the project team. Consent and suppression records may be retained as necessary to honour your choices and meet legal obligations.

Website and administration

We use essential technical data to operate and secure the site. Anonymous mission submissions are not associated with an account or email address. The administration area uses a secure, HTTP-only session cookie for the project owner. We use Sentry for application error monitoring as described above; submitted mission text, form contents, email addresses and request bodies are not sent as error context.

The Civic Code page may store your adoption choice in your browser only; that choice is not sent to our database. For privacy questions, contact the project team using the details provided on the Support page.