Privacy policy

Last updated 3 August 2026

BlocCarbon lets you measure your carbon footprint and fund verified climate projects, either directly or through a campaign run by an organisation you belong to. This page explains what data we handle, which third parties are involved, and your rights.

What we collect

  • Calculator inputs — the quantities you enter (distances, energy use, foods, nights) and the computed results. Public calculator use does not require an account.
  • Account data — your email address if you create an account, join a campaign (verified by a one-time email code) or ask to be emailed your results.
  • Purchase data — when you fund climate projects, we store your order and certificate. Card details go directly to Stripe; we never see them.
  • Campaign data— if an organisation invites you to a campaign, it provided us your email address as the campaign's invitee list. The organisation sees aggregate campaign statistics and your participation status — your individual results are shown to it only in campaign analytics as per-participant totals.

Third-party services

  • Photon (komoot) location search — when you type a place name into a distance question's autocomplete, the text you type is sent to the Photon geocoding service operated by komoot to find matching locations. Only the typed search text is sent — no account or result data.
  • Stripe— payment processing for project funding and subscriptions. Your card details are entered on Stripe's pages and never touch our servers.
  • Resend — sends our transactional email (sign-in codes, results, certificates, campaign invitations).
  • PostHog — privacy-focused product analytics (EU-hosted), used to understand how the product is used. We do not run advertising trackers.
  • Sentry — error monitoring, so we can fix crashes.
  • Vercel & Railway — hosting and database infrastructure. Images you see on project pages are served from Vercel's CDN.

Cookies

We use a session cookie when you sign in, and a small preference cookie to remember your currency choice on the projects page. No third-party advertising cookies.

Your rights

Under UK and EU data-protection law you can request access to, correction of, or deletion of your personal data. Contact the organisation that invited you (for campaign data) or reach us through your account console, and we will respond within the statutory timescales.