Why do we require login?

Why Do We Require Login for Interactive Resources?

We ask you to sign in when you want to set up notifications, save preferences, or access more advanced features. This requirement:

• Prevents Abuse: Authenticating users reduces spam and stops automated or malicious requests from overloading our servers.
• Controls Costs: Interactive features (like configurable alerts) need more resources than public information does. Authentication lets us keep our services reliable at a cost we can sustain.
• Improves Reliability: When we know which notifications go to which user, we can keep the service stable and secure for everyone.

Minimal Personal Data: We only store the essentials: your name, email address, and an anonymous token. This lets us contact you (for example, if a notification cannot be delivered) without holding personal details that we do not need.

Email & One-Time Code (OTC)

We understand not everyone wants to link social media or other accounts. Our Email + OTC sign-in option lets you log in without a password:

1. Enter Your Email
2. Receive a One-Time Code in your inbox
3. Access Your Account by entering that code This process is secure and needs no password. This reduces the risks of traditional email and password sign-in, such as password reuse or data breaches.

OAuth2 Login

We still offer OAuth2 authentication through Facebook, Microsoft, Google, and Apple because it’s a fast, secure, and user-friendly way to log in. It also reduces spam and unauthorised access, because it uses the security systems of these platforms.

• No Extra Passwords to remember: just one click if you’re already logged in.
• Better Privacy & Security: We do not store passwords on our servers, which reduces risk.
• Trusted Infrastructure: These large providers have strong security measures in place, helping keep your account safe.

Concerned About Big-Tech Tracking?

OAuth2 focuses on authentication, not surveillance. We don’t send your usage data to these platforms. Instead, we use their services to verify that “you are who you say you are,” so that we can offer you personalised notifications and settings.

Will You Support Other Services or Methods?

• Strong Authentication: We plan to add more secure options (like hardware tokens or other modern sign-in methods), but we will not support traditional email and password logins. Password-based systems are inherently risky and can compromise user security.
• Enterprise & Government Partnerships: For large deployments, such as a government agency that wants to give end users access without a login, we can configure Bushfire.io Cloud or Enterprise to suit. These are custom arrangements under contract, because we cannot provide every feature for free at large scale.

We protect your privacy, collect as little data as we can, and offer secure, easy ways to sign in. Whether you choose Email + OTC or OAuth2, our aim is the same: timely and reliable disaster intelligence that respects your data.

Having trouble logging in?

See our troubleshooting guide.

Need more info or have a special requirement? Reach out at [email protected]. We welcome feedback, and we continue to improve our sign-in options so that they are both easy to use and secure.