Privacy policy
Local MVP: authentication data is stored by Supabase Auth; contributions and coordinates are stored by the API. Email addresses are never included in public profiles. Contact and retention policies must be finalized before public launch.