Privacy Policy

Effective October 27, 2026 · Last updated October 27, 2026

WellCensus (wellcensus.com) is run by Hyder Media. This page explains what we collect when you use the site, why, who helps us process it, and what you can ask us to do. It also covers the public records the site publishes, which can include people's names. Questions: support@wellcensus.com.

The short version

• You can read the site without an account. We use Google Analytics to count visits.
• If you sign up, we keep your email address and what you do with your account (saved items, alerts, plan, purchases). You can delete your account yourself at any time.
• Every alert or update email has a one-click unsubscribe link. Receipts and sign-in emails are the only exceptions.
• Payments go through Stripe. We never see or store your card number.
• We don't sell your personal information.
• The records on WellCensus come from government and other public sources. If you appear in them, you can ask us to remove or hide your information.

What we collect from you, and why

• Your account. Your email address, a password (stored by Supabase in hashed form; we can't read it) and an optional name. If you sign in with Google, Google tells us your email address and name. We use these to run your account and to email you about it.
• Your plan and purchases. Your plan, its status and billing interval, your Stripe customer reference, and what you bought, when, and for how much. Card details are entered on Stripe's own checkout page and never reach our servers. When you buy, we record that you accepted our Terms of Use and which version.
• What you save. Saved items, lists, watches and alerts, including any webhook address you give an alert. We use them to show your account and to send the alerts you asked for.
• API keys and usage. API keys are stored only as a one-way hash. We keep per-minute request counts for rate limits (deleted after a day), when each key was last used, and how many rows you export each month (for plan allowances).
• "Email me" boxes. If you leave your email on a page to hear about updates or exports, we store it with any note you add, the page and what you asked for. To spot abuse we also keep a one-way hash of your IP address (never the address itself) and your browser family, such as "Chrome on macOS" (never the full browser string), and delete both after 30 days. We send you one confirmation email, with a one-click unsubscribe link. We keep the request until you ask us to delete it.
• Email you send us. Mail to support@wellcensus.com is stored in our support desk. It is sorted and a reply is drafted by AI models that run on our own computers, not a cloud service. Today a person reviews every reply before it is sent. For removal and correction requests, a short summary of the request (not the full email) may be sent to Anthropic's Claude API to help us prepare an internal decision note. Message text is deleted 180 days after a conversation is closed.
• Removal requests. What you enter in the removal form becomes a support request like an email. To stop abuse we also keep a one-way hash of your IP address for 30 days (never the address itself).
• Analytics. Google Analytics 4 records pages viewed, how you arrived, your device and browser, and an approximate location, using cookies. We use it to see which pages are useful.
• Server logs. Like any website, our hosting provider (Vercel) processes your IP address, browser type and the pages you request to deliver the site and protect it from attacks. These logs are short-lived.

Email we send you

• Emails you need. Sign-in links and codes, receipts and purchase confirmations, and replies to messages you send us. These have no unsubscribe link because they are part of a service you asked for.
• Everything else. Watch and saved-search alert digests and the confirmation from an "email me" box. Each one has an Unsubscribe link at the bottom that works with one click and no sign-in, and supports the one-click unsubscribe button in Gmail, Apple Mail and other mail apps. You can stop one kind of email or all of them. You can also turn alerts off on your account page.
• To keep honouring your choice, we keep a one-way hash of your email address and which emails you stopped (never the address itself), and check that list before every one of these emails is sent.

Cookies and browser storage

• Sign-in cookies from Supabase, set only when you sign in, keep you signed in.
• Google Analytics cookies (named _ga and similar) count visits.
• Your light or dark theme choice is saved in your browser's local storage.

We don't show ads. You can block or delete cookies in your browser; the site still works, but you will need to sign in again. To opt out of Google Analytics on every site, Google offers a browser add-on.

Do Not Track

Browsers can send a "Do Not Track" signal. There is no common standard for responding to it, so our sites don't change what they do when they receive one. We don't follow you across other companies' websites.

Who processes data for us

These companies process data on our behalf to run the site:

• Vercel (hosts the site and runs our servers)
• Supabase (our database and sign-in)
• Stripe (payments and billing)
• Resend (sends our email, and receives mail sent to our support address)
• Google (Google Analytics; and Google sign-in, if you choose it)
• Cloudflare (domain name service only; it does not see your visits)
• Anthropic (a short summary of some support requests, described below)

We don't sell or rent your personal information, and we don't give it to anyone else except when the law requires it (for example, a valid court order) or to protect our users or the site from fraud or abuse. If Hyder Media or this site is ever sold, your information would pass to the new owner under this policy, and we would tell account holders first.

How long we keep it

• Account data: while your account is open. Delete it yourself under Account → Delete your account, or ask us to. Deleting removes your profile, alerts, watches, saved items, lists, API keys, team seats and claims straight away.
• Purchase records: as long as tax and accounting rules require.
• Per-minute API counts: one day. Support email text: 180 days after the conversation is closed. IP hashes and browser families from our forms: 30 days.
• The unsubscribe list (a one-way hash of the address): for as long as we send email, so we keep honouring it.
• Everything else listed above: until you ask us to delete it, or we no longer need it.
• Our database provider keeps backups for a short period, after which deleted data is gone from them too.

Your choices and rights

Wherever you live, you can ask us to tell you what we hold about you, correct it, or delete it. You can review and change most of your account details, turn alerts off, and delete your whole account yourself on your account page, and you can unsubscribe from any alert or update email with its link. Otherwise email support@wellcensus.com from the address on your account (so we know it's you). We reply within 10 business days and finish within 45 days. California residents can use the same address for any request under California law, and if we turn a request down you can reply to ask us to look again. We won't treat you differently for asking.

Children

WellCensus is a business data site. It is not meant for children under 13, and we don't knowingly collect their information. If you think a child has given us information, email us and we'll delete it.

Security

The site uses HTTPS everywhere. Account data sits in a database that blocks direct public access, API keys are stored only as hashes, and only Hyder Media staff can reach the data. No system is perfectly secure; if a breach ever affects your information, we'll tell you as the law requires.

The public records on WellCensus

WellCensus publishes U.S. oil and gas wells: API number, operator, status, key dates, depth and location, with operator profiles.

Sources: state oil and gas regulatory agencies (23 states so far); the USGS documented orphaned wells inventory.

Operators are usually companies, but some are individuals, and some wells and leases are named after the family or landowner they were drilled for, so a person's name can appear in a well or operator name.

Removal. If you are named in a record and want your name or contact details removed or hidden, use the removal request form or email support@wellcensus.com. A person reviews every request. When we remove or hide something, we keep it removed when the source data is refreshed. Removing it here does not change the government's own copy; for that, contact the agency that published it.

We don't combine records about the same person across our different sites into a profile of that person.

Changes to this policy

When we change this policy we update the date at the top. If a change materially affects how we use account holders' information, we'll email them before it takes effect.

Contact

Hyder Media, operator of WellCensus: support@wellcensus.com. See also our Terms of Use.