Fill the Can
Privacy Policy
Last updated October 23, 2026
Fill the Can is run by BluePhoenix. This page explains what information the site keeps, who can see it, and how to delete it. In short: we keep only what's needed to run your campaign, we never sell it, and there are no ads or tracking.
What we keep
- Your account: your email address and password. Passwords are stored scrambled (hashed) and nobody, including us, can read them.
- Your campaigns: what you and your team enter: the campaign's name, story, goal, donation link and flyer; businesses and their addresses, contact names, phone numbers and notes; and donation amounts with dates and notes.
- Your team: the display name you choose for each campaign.
- Reports: when someone reports a campaign, we keep the reason, details, and an email address only if they choose to give one.
Your location
The site asks for your device's location only when you tap Use my location. It's used as the center of that business search. The first place you search from is saved as your campaign's home area, so the map opens there next time. Only your campaign's team can see it. You can always type an address instead.
Who can see what
- Locations, contacts, notes and donation records are visible only to your campaign's team.
- If an owner turns on a public page, anyone can see the campaign's name, story, goal, total raised, flyer, donation link, and the names and addresses of businesses that currently have a can. Never contacts, phone numbers, notes or who entered what.
- Reports are seen only by the site's administrators.
- These rules are enforced by the database itself, not just by the app.
Services we use
These companies process data for us only to run the site:
- Supabase stores the database, sign-ins and flyers, and sends account emails.
- Cloudflare hosts the website.
- Geoapify receives the location or address you search from, to find businesses and look up addresses.
- OpenStreetMap provides map images. Like any website, it sees your device's internet address when it sends them.
We don't sell or rent your information, show ads, or use analytics or tracking cookies. Signing in uses your browser's session storage, which is cleared when you close the tab.
How long we keep it
We keep your information until you delete it or your account. Deleted records are removed from the live database right away. Reports are kept so we can deal with repeat problems.
Deleting your information
You can edit or delete any location, donation record, flyer or campaign you own at any time. To delete everything, use Delete my account under Your account on the My campaigns page. This permanently deletes your account and every campaign you own. For any other privacy request, email us.
Children
The site isn't meant for children under 13, and they shouldn't create accounts.
Changes
If we change this policy, we'll update the date at the top.
Contact
Email hello@fillthecan.org.