Privacy Policy

Effective Date: September 27, 2026

Climate Policy Initiative ("CPI," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Net Zero Finance Tracker website.

Information We Collect

Information You Provide

We may collect information that you voluntarily provide to us, including:

• Account email address and password, if you create an account; Supabase Auth stores the password securely
• Contact information you choose to provide in other forms
• Communications you send to us
• Feedback and survey responses

Information Automatically Collected

When you visit our website, we may automatically collect certain information, including:

• IP address and browser information
• Pages visited and time spent on our site
• Referring website information
• Device and operating system information

How We Use Your Information

We use the information we collect to:

• Provide and maintain our website and services
• Improve our website functionality and user experience
• Respond to your inquiries and communications
• Analyze website usage and trends
• Comply with legal obligations

Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy or as required by law. We may share information with trusted service providers who assist us in operating our website and conducting our research.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access your personal information
• The right to correct inaccurate information
• The right to request deletion of your information
• The right to object to or restrict processing

Cookies and Tracking

Account cookies keep you signed in. Usage analytics are on by default for all visitors. Existing saved analytics choices remain in effect. Unless previously turned off, we record page visits, section views, filter and indicator selections, institution views, and downloads when available. Each event has a server time, account ID, a session ID that expires after 30 minutes of inactivity, a route, and the relevant section, filter, indicator, or institution key. We do not put email, search text, or full query strings in these events. Admins can see aggregate usage and a short per-user overview. Raw usage events are deleted after 90 days, and account deletion removes linked events.

By default, the site loads Google Analytics, Contentsquare/Hotjar and Marker.io for all visitors. These providers may set their own cookies and process connection information under their respective notices. Previously saved analytics choices remain in effect. Our own account-linked usage events are recorded only for signed-in users.

Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the effective date.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: