Privacy & Safety

Privacy Policy

Open Door is designed with your safety as the foundation. This page explains exactly what we collect, what we don't, and the protections in place.

Last updated: October 2026

What We Do Not Collect

We do not ask for, collect, or store any personally identifying information from people searching for services. Specifically, we never collect:

  • Your name, phone number, email address, or home address
  • Your precise location or GPS coordinates
  • Any information about your personal situation, history, or circumstances
  • Cookies that track you across sessions or other websites
  • Account registrations from public users — no login is required to search

What We Do Log

To maintain and improve this directory, we collect a minimal set of anonymous, aggregate data:

  • Search queries — the keyword or service type entered (e.g., "shelter", "GED")
  • Location terms — the city or ZIP code entered in the location field
  • Result counts — how many programs were returned for a given search
  • Click-throughs — which organization or program page was opened after a search or while browsing the directory
  • A random session ID — a random code generated in your browser and kept only in that tab's session storage. It lets us group the searches and clicks from one visit together, so we can tell whether a search led to a useful result. Your browser discards it when you close the tab.
  • Timestamps — when a search occurred (date/time, no user identity attached)

These logs contain no names, accounts, IP addresses, or cookies. The random session ID is not tied to an account or device and cannot tell us who you are. We have no way to connect a log record to a named person.

Retention: these search and browse logs, and any optional context a visitor submits after a search with no results, are automatically and permanently deleted after 30 days.

Partner Accounts & Directory Visibility

Organizations in our directory may invite staff members to log in as partners. There are three partner roles:

  • Org Admin — full access to manage their organization's data, programs, and contacts
  • Program Manager — edit access scoped to specific programs within their organization
  • Care Manager — view-only access to the directory, resources, and contacts for care coordination

When you are invited as a partner, we create a Contact record linked to your email address and organization. This record stores your name, phone number, email, and role title.

You control your directory visibility. By default, your contact information is private and is not shown on public program pages. You can opt in to sharing your name, phone, and email by visiting Profile Settings after logging in. You can change this preference at any time, and opting out immediately removes your information from public view.

Record View Tracking (Security Audit)

When authenticated users (partners, admins) view organization or program detail pages, we log the view — including who viewed what and when. This is a security measure to detect and investigate patterns of misuse, such as cyber stalking or unauthorized surveillance of specific individuals or organizations.

View logs are accessible only to platform administrators and are retained for security auditing purposes. We do not identify anonymous public visitors and we keep no per-visitor page-view history of our own. The only activity we log for visitors who are not logged in is the anonymous search and browse log described above.

If you suspect your access is being misused or notice suspicious activity, contact a platform administrator immediately.

Legal Requests & Law Enforcement

Because we do not collect identifying information, we have very little data that could be provided in response to a legal request. However, we take the following position clearly:

We will not voluntarily share any data with law enforcement or government agencies.

We will only produce records in response to a valid, enforceable legal process — specifically a court-issued warrant or a subpoena that has been reviewed and determined to be legally binding and applicable to our platform.

We will challenge overbroad, vague, or legally deficient requests before complying. We will notify affected parties to the extent permitted by law.

Any data we produce under compelled legal process would be limited to the anonymous search and browse logs described above. We cannot produce names, contact details, or identifying information for people who searched this site — because we do not have it.

Third-Party Services

This site is hosted and operated on the Base44 platform. Base44 may process technical request data (such as the IP address and the page requested) and platform usage events as part of normal infrastructure operation. That data is handled under Base44's own privacy and security practices, and we cannot guarantee how long Base44 keeps it.

This site's fonts are hosted on our own servers, so your browser does not contact Google or any other font service. We do not use third-party advertising networks, social media trackers, or analytics services that track individuals.

Maps. Our map pages show map images from OpenStreetMap's public servers. When you open a map, your browser requests those images directly, so OpenStreetMap can see your IP address and the area of the map you are viewing. We do not send them anything else, and no other page on this site contacts OpenStreetMap.

Local browser storage. The Base44 platform software this site runs on may save a random identifier in your browser's local storage (under the name "base44_analytics_session_id"). We have turned the platform's analytics off, and this site does not send that identifier to us or to any third party. It stays on your device until you clear your browser's site data, and it does not contain your name, account, or contact details.

What We Won't Do

These are commitments about how this site treats the people who use it:

  • We will not sell, license, rent, or hand over visitor data, search logs, or usage data to insurance companies, data brokers, advertisers, or any other company.
  • We will not load advertising, retargeting, identity-matching, or visitor-fingerprinting scripts on this site.
  • We will not use third-party analytics services such as Google Analytics.
  • We will not send your IP address to any third-party lookup or location service (our map pages are the one case where an outside server can see it, as described under Third-Party Services), and we do not use your device's GPS location.
  • We will not load fonts, icons, sharing buttons, or other widgets from outside services that would let those services see your visit. The one exception is our map pages, described under Third-Party Services.
  • We will not require you to create an account or give us your name to search.
  • We will not keep search and browse logs longer than 30 days.
  • We will not share any data with law enforcement or government agencies without valid, enforceable legal process, as described above.

If any of these ever needs to change, we will update this page and its "last updated" date first. The hosting platform's own handling of technical request data, described under Third-Party Services, is outside our control.

Questions about this policy? Contact us through the support form or reach out to the organization that administers this directory.

We are committed to updating this policy if our data practices change. The "last updated" date at the top of this page will reflect any changes.