Privacy

Privacy notice.

This policy applies from 5 November 2026.

Last updated 5 November 2026.

Who we are and how to reach us

unclaimd is operated by Griffin Hudson, a sole trader in Western Australia (ABN 42 106 902 285). The same operator makes OPA, the form helper. unclaimd is independent and is not a government service.

Email hello@unclaimd.org about anything in this policy, including access, correction and complaints. support@unclaimd.org reaches the same inbox.

What we collect, and what we never ask for

Without an account, nothing that identifies you is sent to us. With an account, we keep your email address and the broad answers you choose to save:

• state or territory, and age range
• your children’s school stages
• which types of concession card you hold, and the names of payments you receive
• how you live in your home, and whether the electricity account and other household bills or registrations are in your name
• whether you, your partner or a parent served in the Australian Defence Force
• whether anyone is an apprentice or trainee
• residence and daily caring
• a yes/no licence answer with its state

We also keep your support interests, alert choices, saved listings and the claimed status you report.

How much you got. When you mark saved support as claimed, you can choose to enter how much you got. Only you can see it. We use it only to show you your own total of what you’ve told us. We never share it, and we never put it in the totals we count. It is in your data download and is deleted with your account.

We never ask for card numbers, Centrelink reference numbers, DVA file or service numbers, licence numbers, Medicare or tax file numbers, bank details, incomes, myGov credentials, identity documents, health records or details of any condition. Payment and card types are categories, not records about you held by a government.

Your postcode helps us show local support. Without an account it stays in this page’s memory and is never saved or sent. If you’re signed in, we save it with your other answers, and you can remove it any time.

Sensitive answers: disability and First Nations identity

The finder may ask whether anyone in your home has a disability or long-term health condition (yes or no), and whether anyone in your home is Aboriginal or Torres Strait Islander. Under the Privacy Act these are sensitive information: health information, and information about racial or ethnic origin. Some government support is only for these groups, so your answers help us show it. You can always skip them.

Without an account, these answers stay in this page’s memory while you use it. They are never saved in your browser’s storage and never sent to us.

With an account, we save each of these answers only if you tick “Save this answer to my account?” under that question. That tick is your consent, and it is off unless you turn it on. Saved answers are encrypted in our database and shown in your account. We use them only to find support that may fit you. We never send them to device alerts, and we never share them. To remove one, untick it and save, or choose “Remove” beside that answer in Your account. Both are deleted when you delete your account.

What we count

We count totals, never who you are. To learn whether unclaimd helps, we keep daily totals: how many finders were started and finished and how many matches they showed, how many times each listing was saved or its official site was opened, how many times email alerts were turned on or a help message was sent, and the answers to our optional "did you get it?" check-in emails. Each event only adds one to a total for that day. We don’t store your internet address, a cookie, your device or browser details, or your account with it, so the totals can’t be traced back to you. If your browser sends Global Privacy Control or Do Not Track, we don’t count you at all. To stop abuse, we briefly keep a scrambled (hashed) form of your internet address, for up to a day.

Signing in

We email you a 6-digit code that works for 10 minutes. We keep only a scrambled (hashed) copy of the code and of your address until you use it. When you sign in, we set one secure cookie to keep you signed in, for up to 30 days of inactivity, and a second cookie that only says you’re signed in. We store a scrambled copy of the sign-in cookie, not the cookie itself.

If you choose Continue with Google, Google tells us your email address and that it’s verified. We don’t receive or keep your name, photo or Google account ID. Google’s privacy policy covers what Google records when you sign in.

To stop abuse we count sign-in attempts per internet connection and per email address, using scrambled values, for up to a day. Cloudflare Turnstile may check that a person, not a bot, is asking for a code.

Browse without an account

Search and matching run in your browser. Your answers stay in this tab’s session storage so a refresh keeps them. Closing the tab normally clears them, but a browser’s “reopen closed tab” can bring them back. On a shared computer, use a private window, or close the whole browser when you finish. While you wait for a sign-in code, this tab also remembers the email address you typed. Saving a listing keeps only its name on this device. If you add those listings to an account, this device also notes which ones you added, so we don’t offer them again.

Who can use unclaimd

Anyone can search and use the finder. If you are under 18, please ask a parent, carer or another adult you trust before you make an account or save answers.

Why we use it

To show support that may fit, to keep your answers between visits if you ask us to, to send the alerts you opt in to, and to answer your questions. We do not sell information, show advertising, build marketing profiles or use analytics trackers.

Email alerts

Alerts are off until you turn them on. When you turn them on, we send one email to say what will come and how to stop it. Your saved answers decide which reviewed listings are relevant. Every alert email has an unsubscribe link and a one-click unsubscribe that work without signing in.

Device alerts

If you turn on alerts on a device, your browser gives us a push address for that device, run by your browser’s maker (such as Google, Apple or Mozilla). We store it with the same broad answers listed above, and no email or account. Notifications name a program, never your answers. Turning alerts off, or blocking notifications, deletes the push address from our database.

Messages you send us

When you use our contact form, we collect your email address, the topic you choose, your message, and the listing it is about (if any). If you are signed in, we link the message to your account. Before we store your message, we automatically remove numbers that look like tax file, Medicare, Centrelink, card, bank, licence or passport numbers, and passwords. Please don’t send these. We never need them. Email you send straight to our addresses reaches the operator’s inbox in the same way.

No AI. We do not use AI to read or answer your messages. A person reads and answers every one.

Spam protection. Our contact form uses Cloudflare Turnstile to check that messages come from people. To limit abuse, we keep a scrambled (hashed) form of your internet address and email address for one day; we can’t turn these back into the originals.

The OPA form helper

The helper is a Chrome extension. It runs in your browser, and only on a form you choose to open it on. It reads that form and puts the answers you give into it. Your answers stay on your computer. They are held only while you use the helper, and cleared when you finish, close the tab or leave it for 15 minutes. They are never stored, and never sent to us, to any AI service or to anyone other than the official site you are filling in.

The helper never fills in or reads passwords, bank or card details, or tax file, Medicare, licence, passport or other identity numbers. You type those straight into the official page. It never chooses files.

Everything runs on your computer. Voice, listening and smart help use open models (Kokoro for speech, Whisper for listening, and a small language model) that run in your browser. The only download is the model files, from Hugging Face (huggingface.co), the first time you turn one of these on. Hugging Face sees your internet address, as it would for any download, but never your words or answers. Where Chrome has its own built-in model, Gemini Nano, the helper uses that instead, and Chrome downloads it from Google. The browser’s own speech recognition is not used, because it sends audio to a cloud service.

The helper keeps a list of its actions on your computer: the site, and the names of the fields and buttons it used, never your answers. It also keeps your settings and the sites you allowed. You can clear these in its settings, or by removing the extension.

Chrome Web Store. The use of information received by the helper will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. We don’t sell it, use it for advertising or to decide credit, or let people read it.

Where your information is kept, and who handles it

Your account (your email address and the broad answers you choose to save) is kept in a Cloudflare D1 database. We asked Cloudflare to place it in the Oceania region, but Cloudflare doesn’t guarantee that, and it handles website requests and backups across its global network. Your information may be processed outside Australia, including in the United States.

We use these service providers:

• Cloudflare runs the website, sign-in, accounts, alerts and support requests, checks for bots with Turnstile, and forwards mail sent to our addresses.
• Resend (United States) sends sign-in codes, alerts and our replies.
• Google confirms your email address, only if you choose Google sign-in.
• Your browser’s push service delivers device alerts.

Each provider is bound by its own data-protection terms. Overseas recipients may not be subject to Australian privacy law in the same way.

How long we keep it

• Account details, saved answers and saved listings, with any amounts you entered: until you erase your profile or delete your account.
• Alert delivery records: deleted with your account.
• Device alert addresses: until you turn device alerts off or the push service tells us the address has expired.
• Support messages and our replies: 12 months after you send them, then deleted automatically. Deleting your account also deletes support messages sent from its email address.
• Scrambled sign-in and spam-protection counts: up to a day.
• Cloudflare’s database backups roll over within 30 days. Deleted data can remain in a backup until then.

Access, correction and deletion

You can view and change your saved answers in your account, erase your profile, or delete your account. In your account, Download my data gives you a copy of everything we keep about it, including the alert emails and deadline reminders we sent you: which listing, when, and whether it went. Deleting your account immediately removes your email address, sessions, saved answers, saved support (with any amounts you entered), alert history and support messages from the active database. We then send one last email to that address to confirm the deletion. We use the address only to send it and don’t keep it. Listings saved on a device are removed by clearing this site’s browser storage. To see or correct anything else we hold, email hello@unclaimd.org.

Questions and complaints

Email hello@unclaimd.org. We aim to respond within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Official applications

We link you to government websites. Their privacy policies govern what you submit to them. unclaimd does not lodge claims; OPA fills in the form you choose, in your browser, while you watch.