Privacy Policy
Last Updated: August 2026
STRATUM provides tools for the exploration geosciences. We believe in being transparent about how we collect, use, and protect your data. This policy is written in plain English because your privacy should not require a law degree to understand.
We do not sell or share your personal data with advertisers or data brokers. We only collect what we need to run the service, communicate with you, and improve the platform.
What data we collect
When you interact with STRATUM, we collect information you provide directly and information automatically logged by our systems.
- Account & Contact Information: When you sign up for early access, use our contact form, or create an account, we collect your name and email address.
- Project & Workspace Data: If you create an account, the projects, areas of interest, annotations, and other work you save in STRATUM are stored against your account so you can return to them. Georeferenced files you upload to render as a map layer (e.g. GeoTIFFs) are processed entirely in your browser and are not uploaded to our servers.
- Usage Data: We log how you interact with the platform (e.g., searches performed, tools used). This helps us understand what features matter and identify performance bottlenecks.
- Technical Data: We collect standard web traffic information like IP addresses, browser types, and operating system data for security monitoring and platform performance.
Cookies
STRATUM uses two kinds of cookies:
- Strictly necessary cookies keep you signed in and let the platform function. These are set automatically and cannot be switched off, because the service does not work without them.
- Analytics cookies (via Vercel Analytics and Speed Insights) help us understand how the platform is used, so we can improve it. These are not set until you accept them in the cookie banner shown on your first visit, and we do not use advertising or cross-site tracking cookies of any kind.
You can change your choice at any time by clearing the stratum_cookie_consent entry from your browser's local storage for this site, which will show the banner again on your next visit.
How we use your data
We use your data solely to provide, secure, and improve STRATUM. This includes:
- Operating the platform and providing the services you request.
- Sending transactional emails (like waitlist confirmations or password resets).
- Responding to your support queries or contact form submissions.
- Analysing usage patterns to build a better product, where you have accepted analytics cookies.
Third-party services
We use a small number of trusted third-party services to help operate STRATUM, each of which only has access to the data necessary to perform its specific function and is prohibited from using it for anything else:
- Supabase — authentication and storage of your account and workspace data.
- Vercel — application hosting, and (only with your consent) analytics and performance monitoring.
- Mapbox — base map tiles and geocoding for the map interface.
STRATUM also displays public geological, tenure, and mapping data sourced directly from government departments and data providers (for example state geological surveys and ArcGIS Online services). Requests for this data may pass through our servers, but this is public reference data, not your personal information.
International data transfers
Our infrastructure providers operate data centres in multiple countries, which may be outside your own. Where we transfer personal data internationally, we rely on the safeguards those providers make available (such as standard contractual clauses) to ensure your data continues to be protected to the standard described in this policy.
Data retention
We keep your personal information only as long as your account is active, or as long as necessary to fulfil the purposes outlined in this policy or to comply with legal obligations. If you request account deletion, we will remove your personal data from our active systems within 30 days; a copy may persist in encrypted backups for up to 90 days after that before being purged.
Your rights (GDPR)
If you are located in the European Economic Area or the United Kingdom, we process your personal data on the basis of your consent (for optional cookies and marketing communications), the necessity of processing to provide the service you have requested (a contract), or our legitimate interest in operating and securing the platform. You have the right to:
- Access the personal data we hold about you.
- Correct any inaccurate or incomplete data.
- Delete your personal data from our systems.
- Restrict or object to certain processing, and withdraw consent at any time.
- Receive your data in a portable format.
- Lodge a complaint with your local data protection authority.
Your rights (California residents)
If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, request its deletion or correction, and opt out of its “sale” or “sharing.” We do not sell your personal information, and we do not share it for cross-context behavioural advertising. You will not be discriminated against for exercising any of these rights. To make a request, contact us using the details below.
Children's privacy
STRATUM is a professional tool for the mineral exploration industry and is not directed at, or intended for use by, anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will remove it.
Changes to this policy
We may update this policy from time to time as the platform evolves. If the changes are significant, we will notify you via email or a prominent notice on the site.
Contact us
If you have questions about this privacy policy or want to make a request regarding your data — including any of the rights listed above — please email us at privacy@stratum.com.