Your privacy, our commitment
We designed this catalog with privacy in mind. Here is exactly what we collect, why, and how you can control it.
Last updated: April 2026
What we collect
We collect minimal data to operate the platform and understand how people interact with it.
- Usage analytics — We use Google Analytics 4 to collect anonymous data about pages visited, time on site, device type, and general location (country/city level). This data is aggregated and does not identify you personally.
- Account data — If you register, we store your email address and display name. Your password is never stored — authentication is handled securely by Supabase.
- Contributed content — If you submit species data, photos, or other content, it is stored in our database and image delivery system (Cloudflare R2).
- Technical logs — Standard server logs may capture your IP address, browser type, and referring page for security and performance monitoring only.
Cookies & tracking
We use a small number of cookies strictly necessary to run the site. We do not use advertising tracking cookies.
Analytics cookies (Google)
Google Analytics sets cookies (_ga, _ga_*) to distinguish visitors and measure engagement. These expire after 2 years. All data is processed in aggregate and is fully anonymized.
Session cookies (Supabase)
If you are logged in, a secure session cookie keeps you authenticated. It expires when you log out or after 7 days of inactivity.
You can opt out of Google Analytics at any time by installing the Google Analytics Opt-out Browser Add-on, or by disabling cookies in your browser settings.
How we use your data
- Improve the catalog — Analytics help us understand which species, habitats, and features are most used, so we can prioritize improvements.
- Security & integrity — Technical logs help us detect and prevent abuse, spam, and unauthorized access.
- Account management — Your email is used solely for account access and recovery. We do not send unsolicited marketing emails.
- No data selling — We never sell, rent, or share your personal data with third parties for commercial purposes, under any circumstance.
Third-party services
We use the following trusted services to operate the platform. Each has its own privacy policy:
Your rights
Depending on your country (including the EU under GDPR), you may have the following rights:
- Access — Request a copy of the personal data we hold about you.
- Correction — Ask us to correct inaccurate or incomplete data.
- Deletion — Request that we delete your account and all associated personal data.
- Opt-out of analytics — Disable Google Analytics tracking via your browser settings or the Google opt-out add-on.
- Data portability — Receive your contributed data in a machine-readable format.
To exercise any of these rights, contact us at: privacy@costaricaspecies.com
Changes to this policy
We may update this policy as our services evolve. The "Last updated" date at the top of this page will always reflect the latest version. Continued use of Costa Rica Species after any change constitutes acceptance of the updated policy.
