Privacy Policy

NO MORE Directory was built so that seeking help does not put survivors at greater risk. Stealth navigation, the quick-exit control, and careful data practices are part of that design.

We collect only what is needed to operate the directory and — with your explicit consent — anonymous analytics to show funders that the resource is reaching people. We never sell data or use ad trackers.

Essential: We store your privacy choice (`nm_consent`) in your browser's local storage so the consent banner does not reappear on every visit. This is required for the site to remember your preference.

Analytics (opt-in only): If you choose Accept, we set a short-lived `nm_session` cookie (30 minutes, SameSite=Lax, Secure on HTTPS). It holds a random identifier used only for anonymous page metrics. The server stores a one-way hash — not the raw value.

Google Analytics (opt-in only): If you Accept and we have configured a measurement ID, Google may set `_ga` / related cookies per Google's policy. We load GA4 only after consent and use IP anonymization.

If you Decline, no analytics cookies are set and no metrics or GA4 scripts run. The site works the same.

With your consent, we record anonymous page views: which page was viewed, a coarse referrer category (direct / search / social / other — never the full referring URL), device type, and approximate country from the connection (for aggregate NGO reporting).

We do not record names, email, phone, precise location, search queries, or form entries. Session identifiers are hashed before storage.

The quick-exit (panic) control never sends analytics events. Navigating away via that control is not logged in our metrics or in GA4.

Our NGO partners may require aggregate exposure reports. GA4 runs only after you Accept analytics in the consent banner.

GA4 is operated by Google LLC. Their processing is governed by Google's terms and privacy policy. We configure anonymized IP where supported.

Without your action we do not collect PII: no account system, no email capture on browse, no phone numbers, no survivor profiles.

We do not use advertising pixels, social widgets that profile users, or fingerprinting libraries.

If you use “find resources near me,” your browser may ask permission to share location. Coordinates are used only on your device to sort results and are not sent to our servers in the current website scope.

If you decline, all features remain available.

When stealth history is enabled, in-app links avoid stacking browser Back entries so routine browsing does not leave a deep trail. Staging/QA may use normal Back/Forward for testing. We cannot fully prevent your browser from recording that you visited this site.

For stronger protection, use Private/Incognito mode. The quick-exit button leaves this site immediately.

The public website is served from AWS CloudFront with HTTPS. The API and metrics pipeline run in a private AWS environment. Infrastructure logs may contain truncated request metadata for operations; they are not linked to survivor identity.

We link to external organisations (hotlines, legal aid, shelters). Their privacy practices are their own.

We design for US privacy expectations including state laws such as the CCPA. Because analytics are consent-gated and we avoid PII, many access/deletion requests have little or no personal data attached.

Questions: privacy@nomore.directory — we respond within 30 days.

We may update this policy as the service evolves. The date below shows the latest revision. Material changes to analytics will be reflected in the consent banner.