Privacy policy, terms and contact
Plain language, no legal fog. Last updated: September 2026.
1. What we store
When you register as a donor we store: your name, mobile number, blood group, district, optional area, optional age and note, optional last-donation date, and — only if you tap “Use my current location” — your GPS coordinates. When you post an emergency request we store the patient’s name, blood group, units, hospital, district, attendant name and number, deadline and note.
We do not store passwords, email addresses, medical records, national ID numbers, IP logs or advertising identifiers. There are no third-party analytics or ad networks on this site.
2. What is public
Visible to any visitor: your name, blood group, district/area, availability status, donation count, age and note. Your mobile number is never rendered in the page until a visitor explicitly taps “Show contact”, and that action is limited to 25 reveals per browser per hour to discourage scraping.
If you do not want your name searchable by search engines, use a first name plus initial when registering, and keep the note field free of personal details.
3. Your location
Location is optional and used only to sort donors by distance. Even when shared, the public interface shows only an approximate distance in kilometres, never the coordinates. Without GPS we fall back to the centre of your district, which is a rough estimate.
4. How to change or delete your data
Open My donor profile on the device you registered from. You can edit every field, pause your listing, log a donation, or delete the listing permanently. Deletion takes effect immediately. If you have lost access to that device, contact us and a moderator will remove it manually.
5. Security
Data is stored in Google Cloud Firestore with security rules that allow anyone to read the directory but only the owner of a record to update or delete it. Records are created through an anonymous Firebase session, so an attacker cannot silently edit someone else’s listing. The full rule set is published in the repository and can be copied from the moderator dashboard.
6. Moderation
Volunteer moderators from Batch 27 may verify, suspend or delete listings and emergency requests that are false, commercial, duplicate or abusive. Paid blood dealing is illegal in Bangladesh; any such listing is removed without notice.
7. Children
One Drop is intended for donors aged 18 and over. We do not knowingly collect data from anyone younger.
8. Terms of use
- You confirm that the information you submit is true and that you are medically fit to donate.
- Donation must always be voluntary and unpaid. Never ask for or accept payment.
- Do not post false, duplicate or commercial emergency requests.
- Do not use the directory for marketing, spam or harassment.
- One Drop is provided “as is”. We are a student coordination tool, not a medical service, and we are not liable for the outcome of any transfusion or for a donor’s failure to respond.
- In a life-threatening emergency, call the hospital blood bank and emergency services first.
9. Changes to this policy
If we change what we store, we will update this page and note the date at the top. Continued use after a change means you accept the updated policy.
10. Contact the team
Found a wrong listing, a fake request, or have a suggestion? Write to us — moderators check this inbox from the admin panel.
Credits
Idea & initiative: Students of Notre Dame College, Dhaka — Batch 27.
Developed by: Foysal Mahmud.