🔒 The founding charter, in detail
Privacy policy
The short version: your data is strictly private, never shared, never sold, used only to run this community, and you can take it or delete it whenever you like. Here's the long version.
✍️ Signed and standing
The Founder's Pledge
Spectrum Path is 100% non-profit. It has no owners, no shareholders, no investors — and nothing for sale, least of all you.
I pledge, in my own name, to every family here: your data will never be sold. Never shared, rented, traded or given to anyone — not to advertisers, not to data brokers, not to “partners”. Not now, not ever, not under any future arrangement. If Spectrum Path ever could not continue, your data would be returned to you and deleted — never passed on.
This community exists for one reason: so no family walks this path alone. Your trust makes that possible, and this pledge is what your trust stands on.
Carter Murray
Carter Murray · Founder, Spectrum Path · signed 21 August 2026
Last updated: 21 August 2026. Data controller: [ORGANISATION NAME — complete after registration], contact hello@thespectrumpath.com.
What we collect, and why
| Data | Why we have it | Basis |
|---|---|---|
| Email address & password (password stored only as a secure hash) | Your account and sign-in | Running the service you asked for |
| Display name (first name + last initial, e.g. Sarah K. — or anything anonymous; never a full surname) | What other members see | Running the service |
| Your tribe profile — support level, communication, co-occurring conditions, life stage, school type, country (all optional) | Connecting you with families on a similar path — the whole point of the site. This can reveal health-related information about your family, so it is collected only with your explicit consent, is entirely optional, and can be emptied at any time | Your explicit consent |
| What you post — chat posts, stories, moments, messages | Displaying it to the community as you intended | Running the service; your choice to post |
That's the complete list. No advertising identifiers, no tracking cookies, no analytics profiles, no third-party trackers of any kind — the site's code contains none.
The promises (from the founding charter)
- Never shared, never sold, to anyone, for any reason. There are no advertisers, brokers or "partners". The only third parties that touch data are the infrastructure that runs the site (below), acting under our instructions.
- Community-only visibility. Community content is protected by database-level security rules: only signed-in registered members can read it. Private messages are readable only by their two participants. The public internet sees none of it.
- Data minimisation for children. We hold no accounts for children and ask you never to post identifying details about them (children are referred to by first name only — never a surname — and nothing more precise than a city; adults use first name + last initial — the guardrails). The information in your tribe profile is about your family's path, held in your name, under your control.
A closed community
Spectrum Path is not a public forum. Everything members share — chat groups, stories, bright moments, messages, mosaics — lives behind sign-in, visible only to registered members of this community. Search engines cannot index it, visitors cannot browse it, and the public internet never sees it. During the founding period, membership itself is closed: every account is personally seated by the founder, one family at a time. Private messages go further still — readable only by the two people in them, enforced by the database itself, not just the website.
How your data is stored, for safety
- Encrypted in transit — every connection to the site uses HTTPS/TLS; nothing travels in the clear.
- Encrypted at rest — the database and its backups are stored encrypted in a professionally run datacentre in London.
- Passwords are never stored — only a one-way secure hash (bcrypt); no one, including us, can read your password.
- Row-level security — access rules are enforced inside the database on every single row, so even a bug in a page cannot expose another family's private data.
- Least access — no analytics companies, no trackers, no third-party scripts touch member data; only founder-moderators hold administrative access, used solely for safety and moderation.
Where it lives
The site runs on two infrastructure providers, both acting as processors under standard data-protection terms: Supabase (database and sign-in; project hosted in London) and Netlify (serving the website's pages; standard server logs). Neither is permitted to use community data for their own purposes.
Your rights
- See and export everything you've shared — email us and we'll provide it in a portable format.
- Correct or empty your profile — any time, from your account page.
- Delete everything — email hello@thespectrumpath.com from your account email and your account, profile, posts and messages are permanently deleted. (Self-serve buttons are coming; until then it's a same-week manual promise.)
- Withdraw consent for the tribe profile at any time by emptying it — matching simply stops.
- Complain — we'd rather you told us first, but you always have the right to complain to your data-protection authority (in the UK, the ICO at ico.org.uk).
Retention
We keep your data while your account exists. Deleted content is removed from the site immediately; moderation records of removed-for-harm content are retained only as long as needed for safety and legal purposes. Backups cycle out on the infrastructure providers' standard schedules.
Cookies & local storage
Strictly essential only: a sign-in token so you stay logged in, stored in your own browser. No advertising or analytics cookies exist on this site. That's why there's no cookie banner — there's nothing to consent to.