Privacy Policy

1.0Data Collection

To deliver climate risk intelligence, the platform collects the minimum data technically necessary to operate a session:

• Authentication tokens — cryptographic session markers issued by third-party identity providers (e.g. Google OAuth). No passwords are stored by OpenPlanet.
• Geospatial query parameters — city names, coordinates, emissions scenario selection, and mitigation slider values entered during an analysis session.
• Diagnostic telemetry — compute latency and API response times, aggregated and anonymised, used solely to maintain engine performance.

2.0Data Sources and Attribution

All climate projections are derived from publicly accessible scientific archives. No proprietary or personally identifiable data is ingested into the analytical models. Primary data sources with full attribution:

• Copernicus C3S ERA5 — ECMWF ERA5 global reanalysis (1991–2020 standard normal period). Hersbach et al. (2020), doi:10.1002/qj.3803.
• CMIP6 Ensemble — MRI-AGCM3-2-S and MPI-ESM1-2-XR projections. All outputs are strictly capped at 2050 — the validated horizon for these model outputs. Accessed via Open-Meteo Climate API.
• Socioeconomic data — UN Population Division, World Bank national accounts, and most recent national census publications. No user-derived data is used in model calculations.

3.0Non-Monetization and Confidentiality

OpenPlanet does not sell, lease, or share user query histories with third-party commercial entities or data brokers. Geographic areas of interest researched within a session are not broadcast, shared, or used for profiling. Query data is processed only to generate the requested scientific output and is not retained beyond technical necessity.

4.0Third-Party Infrastructure

The platform runs on Vercel edge infrastructure and uses Copernicus C3S / Open-Meteo APIs for scientific data retrieval. These providers operate under their own privacy frameworks. Data is shared with infrastructure providers strictly for the purpose of executing model computations and serving the user interface. No user data is shared beyond what is operationally required.

5.0User Rights

Users may terminate sessions, revoke OAuth tokens via their identity providers, and request deletion of account data. Requests should be directed to the project repository issue tracker. As an open-source educational project, OpenPlanet maintains no commercial user database; session state is stored locally in the browser via sessionStorage and localStorage only.