Third-party services (SDK audit)

This list is generated from the current Sightra codebase. It is an engineering inventory, not a certification that each vendor’s processing is lawful in every jurisdiction. No advertising or analytics SDKs are loaded unless you later opt in and we ship that code.

• Supabase Auth — email/password and optional Google OAuth; stores account identifiers and sessions per your Supabase project region.
• Google OAuth — only if you tap Continue with Google; Google’s terms apply.

• Google Gemini — text generation from detection metadata and prompts (not raw camera frames in the current implementation).
• LiveKit — real-time audio/video when you use volunteer connect / live call.

• OpenStreetMap tiles, Nominatim, OSRM — loaded in the browser on map pages; may receive search text or coordinates you submit.

• Tailwind CSS CDN — stylesheet runtime for layout.
• Google Fonts — Inter and Lexend.
• Google Material Symbols — icon font.

These CDNs receive the network request needed to download assets (typically IP address and user agent).

The Django application is hosted by the operator’s hosting provider (for example a cPanel server). Server logs may include IP addresses and error traces.

We do not currently include Google Analytics, Meta Pixel, Hotjar, advertising SDKs, or crash reporters that phone home beyond the services above. If that changes, this page and the Cookie Policy will be updated before those scripts load, and they will remain off until you accept optional cookies.