PRIVACY & DATA HANDLING

Protect the students who speak up.

What we collect

The incident form may collect an issue category, incident date and location, amount, optional citation reference, connectivity status, factual narrative, available evidence, requested outcome, optional Transportation Services employment relationship, optional personal email or phone number, and reuse preferences.

What not to submit

Do not submit student IDs, driver’s-license numbers, financial information, home addresses, passwords, full VINs, or unredacted license plates. File uploads are disabled in the initial release.

How reports are protected

Production submissions travel over HTTPS through a Vercel server function. Vercel BotID reduces automated abuse. The function validates and limits every field, checks the exact website origin, and writes to a private Supabase table. Row Level Security is enabled and the browser receives no database credential. The application does not store raw IP addresses; it stores a daily rotating cryptographic digest solely to enforce an hourly submission limit.

Access and publication

Raw submissions are restricted to project operators and are never published automatically. Contact details and employment relationship answers stay private. Public analysis uses aggregate data or redacted excerpts consistent with each submitter’s selected permission. Attribution requires separate affirmative approval.

Retention

Raw reports are retained for up to 180 days, then deleted or anonymized unless needed for an active records request, appeal, or explicitly approved case study.

Access, correction, or deletion

Email think@ucdavis.edu. We may need to verify enough information to identify the report before changing or deleting it.