BlocCarbon

Privacy policy

Last updated 7 August 2026

BlocCarbon lets you measure your carbon footprint and fund verified climate projects, either directly or through a campaign run by an organisation you belong to. This page explains what data we handle, which third parties are involved, and your rights.

What we collect

  • Calculator inputs — the quantities you enter (distances, energy use, foods, nights) and the computed results. Public calculator use does not require an account.
  • Account data — your email address if you create an account, join a campaign (verified by a one-time email code) or ask to be emailed your results.
  • Purchase data — when you fund climate projects, we store your order and certificate. Card details go directly to Stripe; we never see them.
  • Campaign data— if an organisation invites you to a campaign, it provided us your email address as the campaign's invitee list. The organisation sees aggregate campaign statistics and your participation status — your individual results are shown to it only in campaign analytics as per-participant totals.

Third-party services

  • Photon (komoot) location search — when you type a place name into a distance question's autocomplete, the text you type is sent to the Photon geocoding service operated by komoot to find matching locations. Only the typed search text is sent — no account or result data.
  • Stripe— payment processing for project funding and subscriptions. Your card details are entered on Stripe's pages and never touch our servers.
  • Resend — sends our transactional email (sign-in codes, results, certificates, campaign invitations).
  • PostHog — privacy-focused product analytics (EU-hosted), used to understand how the product is used. We do not run advertising trackers.
  • Sentry — error monitoring, so we can fix crashes.
  • Vercel & Railway — hosting and database infrastructure. Images you see on project pages are served from Vercel's CDN.

Cookies

We use a session cookie when you sign in, and a small preference cookie to remember your currency choice on the projects page. No third-party advertising cookies.

Your rights

Under UK and EU data-protection law you can request access to, correction of, or deletion of your personal data. Who to ask depends on whose data it is, because it is not all held by the same controller:

  • Campaign data — your submissions, results and any leaderboard name from a campaign you were invited to. The organisation that invited you is the controller, so ask them. Their console can export everything they hold about you as a file, and can erase your identity from it. Erasure keeps the anonymous measurement in their campaign totals — those totals are their record, and a footprint with no name attached is no longer about you.
  • Your public calculator results and any address you gave us to email them to. BlocCarbon is the controller here, so ask us directly using the contact details above.
  • Your BlocCarbon sign-in account. Also ours — it spans every organisation you belong to, so no single organisation can delete it on your behalf.

We respond within the statutory timescales either way, and will point you to the right controller if you ask the wrong one.