Reviewed 17 July 2026
Privacy & security
Mashvara is a public civic-reporting platform. This notice explains what is public, what stays private, and which service providers help operate the site.
Account information
Registration stores your name, email address, optional phone number, optional area, and a one-way password hash. Passwords are never stored as readable text. Signed-in sessions use a secure, HttpOnly cookie that expires after seven days.
Public reports
A report's title, description, neighbourhood, category, urgency, photo, display name, comments, support signals, and status notes are public. Do not include a home address, CNIC, phone number, faces, vehicle plates, or another person's private information in a report or photo.
Anonymous option
Selecting “Submit anonymously” hides your name from the public report. If you are signed in, the report may still be linked privately to your account for moderation and abuse prevention. Anonymous does not mean untraceable to the platform or its infrastructure providers.
Infrastructure and analytics
Account and report records are stored in Neon Postgres. Vercel hosts the application and provides operational analytics. Google Analytics is enabled for aggregate usage measurement; Microsoft Clarity runs only when its deployment setting is configured. These providers may process technical data such as device, browser, network, and page-view information under their own terms.
Limits and retention
Mashvara currently has no self-service account deletion, password reset, or email-verification flow. Reports and account records remain stored until they are removed by an authorised administrator. Do not create an account or submit personal data if these limits do not meet your needs.
Important civic-reporting note
Mashvara is not an emergency service and is not affiliated with a government body. For immediate danger, call the relevant official emergency service. Publishing here does not file an official complaint.