Does It Flood? | Real-Time Flood Risk & FEMA Maps

At Does It Flood?, we take your privacy seriously. This policy explains what personal information we collect, how we use it, who we share it with, and the choices and rights you have.

1. Information We Collect

We collect the following categories of information to provide and improve our services:

Account information: Your name, email address, and (if you provide it in your profile) your phone number and full mailing/home address (street, city, state, and ZIP code).
Payment information: When you subscribe to a paid plan, billing details are collected and processed by our payment processor, Stripe. We do not store full card numbers on our servers.
Property searches and location data: The addresses and map locations (latitude/longitude coordinates) you search for or view, so we can return flood risk information and save your search history.
User contributions: Photos, comments, and flood reports you voluntarily submit to the platform.
Technical and usage data: Your IP address, device and browser information, and information about how you interact with our website, including pages visited and features used.

2. How We Use Your Information

We use the information we collect for the following purposes:

To provide, maintain, and improve our services, including generating flood risk assessments and AI-generated risk narratives for the properties you search.
To process transactions and send related information, including confirmations and invoices.
To verify the accuracy of crowdsourced flood reports.
To protect our services, including detecting, preventing, and addressing technical issues, abuse, and fraudulent activity (for example, rate limiting by IP address).
To communicate with you about your account, and (where you have opted in) about products, services, offers, and events.

3. Third Parties We Share Data With

We do not sell your personal information as a standalone product. We do share limited data with the following service providers so that our service can function, and with advertising partners when ads are shown on the site. Each is subject to its own privacy policy:

Google (Firebase & Google Cloud): Provides our authentication, database (Firestore), and hosting infrastructure. Your account information, saved searches, and contributions are stored here.
Google (Gemini / Generative Language API): Powers our AI risk narratives. When an AI assessment is generated, the searched property address and its coordinates (and related flood data) are sent to Google’s Generative Language API to produce the narrative.
Google AdSense: Serves advertisements on our site. Google and its advertising partners may use cookies or similar technologies to show ads based on your prior visits to this or other websites. See Google’s advertising policies and How Google uses information from sites or apps that use our services. You can manage ad personalization at adssettings.google.com.
Stripe: Processes subscription payments and stores your billing information.
Upstash: Provides distributed rate limiting; your IP address is processed to enforce request limits and protect the service from abuse.
Mapbox: Serves interactive map tiles. When you use the map, requests (which may include your IP address and the map coordinates you are viewing) are made to Mapbox.

We may also disclose information where required by law, in response to valid requests by public authorities, or to protect the rights, property, or safety of our users or others. If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

We may produce and use de-identified or aggregated statistics (for example, general flood-search trends) that do not identify you. We do not currently sell or share such data with municipalities or researchers; if that ever changes, we will update this policy and, where required, obtain your consent.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. When you delete your account, we delete your profile, saved searches, favorites, notes, and contributions, and your authentication record, as described in the “Your Privacy Rights” section below. Some records may be retained where required for legal, tax, or fraud- prevention purposes.

6. Your Privacy Rights

Depending on where you live, U.S. state privacy laws, including the California Consumer Privacy Act as amended by the CPRA, the Colorado Privacy Act (CPA), the Virginia Consumer Data Protection Act (VCDPA), and similar laws in other states, give you the following rights:

Right to access / know: Request a copy of the personal information we hold about you and details about how it is used and shared.
Right to correct: Request correction of inaccurate personal information. You can update most profile details directly in your account settings.
Right to delete: Request deletion of your personal information. You can delete your account and associated data yourself at any time from your account settings using the “Delete My Account” option, or by contacting us.
Right to opt out: Where applicable law treats advertising cookies or similar technologies as a “sale” or “share” for targeted advertising, you can opt out via Google’s Ad Settings, industry tools such as the Digital Advertising Alliance, or by contacting us. You can also opt out of marketing emails at any time through your account preferences or the unsubscribe link in our emails.
Right to non-discrimination: We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, use the self-service tools in your account settings or contact us at privacy@doesitflood.com. We may need to verify your identity before fulfilling certain requests. You may also designate an authorized agent to make a request on your behalf where the law permits.

7. Children’s Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can delete it.

8. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date.

9. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

Random Llama Software
Email: privacy@doesitflood.com

1. Information We Collect

We collect the following categories of information to provide and improve our services:

Account information: Your name, email address, and (if you provide it in your profile) your phone number and full mailing/home address (street, city, state, and ZIP code).

Payment information: When you subscribe to a paid plan, billing details are collected and processed by our payment processor, Stripe. We do not store full card numbers on our servers.

Property searches and location data: The addresses and map locations (latitude/longitude coordinates) you search for or view, so we can return flood risk information and save your search history.

User contributions: Photos, comments, and flood reports you voluntarily submit to the platform.

Technical and usage data: Your IP address, device and browser information, and information about how you interact with our website, including pages visited and features used.

2. How We Use Your Information

We use the information we collect for the following purposes:

To provide, maintain, and improve our services, including generating flood risk assessments and AI-generated risk narratives for the properties you search.

To process transactions and send related information, including confirmations and invoices.

To verify the accuracy of crowdsourced flood reports.

To protect our services, including detecting, preventing, and addressing technical issues, abuse, and fraudulent activity (for example, rate limiting by IP address).

To communicate with you about your account, and (where you have opted in) about products, services, offers, and events.

3. Third Parties We Share Data With

Google (Firebase & Google Cloud): Provides our authentication, database (Firestore), and hosting infrastructure. Your account information, saved searches, and contributions are stored here.

Google (Gemini / Generative Language API): Powers our AI risk narratives. When an AI assessment is generated, the searched property address and its coordinates (and related flood data) are sent to Google’s Generative Language API to produce the narrative.

Google AdSense: Serves advertisements on our site. Google and its advertising partners may use cookies or similar technologies to show ads based on your prior visits to this or other websites. See Google’s advertising policies and How Google uses information from sites or apps that use our services. You can manage ad personalization at adssettings.google.com.

Stripe: Processes subscription payments and stores your billing information.

Upstash: Provides distributed rate limiting; your IP address is processed to enforce request limits and protect the service from abuse.

Mapbox: Serves interactive map tiles. When you use the map, requests (which may include your IP address and the map coordinates you are viewing) are made to Mapbox.

5. Data Retention

6. Your Privacy Rights

Right to access / know: Request a copy of the personal information we hold about you and details about how it is used and shared.

Right to correct: Request correction of inaccurate personal information. You can update most profile details directly in your account settings.

Right to delete: Request deletion of your personal information. You can delete your account and associated data yourself at any time from your account settings using the “Delete My Account” option, or by contacting us.

Right to opt out: Where applicable law treats advertising cookies or similar technologies as a “sale” or “share” for targeted advertising, you can opt out via Google’s Ad Settings, industry tools such as the Digital Advertising Alliance, or by contacting us. You can also opt out of marketing emails at any time through your account preferences or the unsubscribe link in our emails.

Right to non-discrimination: We will not discriminate against you for exercising any of these rights.