Privacy Policy

1.Information we collect

We collect the following categories of information:

• Account information. Your email address, username, and — if you sign in with Google — the basic profile details Google shares (name, email, and avatar). We never receive your Google password.
• Profile information. Any avatar, bio, or other details you choose to add to your profile.
• Content you create. Posts, comments, replies, mentions, likes, saved items, uploaded images, and reports you submit.
• Technical and usage data. Information collected automatically such as your IP address, browser type, device information, and interactions with the service. This supports security, abuse prevention, and rate limiting.
• Cookies and session data. Essential cookies used to keep you signed in and to secure your session. See Cookies and sessions.

2.How we use your information

We use personal information to:

• Create and manage your account and authenticate you.
• Operate core features — publishing, commenting, mentions, notifications, likes, and saved items.
• Maintain safety and integrity, including moderation, spam and abuse prevention, and rate limiting.
• Respond to your requests and provide support.
• Comply with legal obligations and enforce our Terms and Conditions.

3.Legal basis for processing

We process your personal data on the basis of your consent, the performance of our agreement with you (providing the service), our legitimate interests in keeping the platform safe and functional, and compliance with applicable law. You may withdraw consent at any time by closing your account, though some processing may continue where we have another lawful basis.

4.Cookies and sessions

We use strictly necessary cookies to authenticate you and maintain a secure session. These are required for the service to function and cannot be disabled while you are signed in. We do not use cookies to build advertising profiles of you. If advertising is enabled in the future, this policy will be updated before any such cookies are set.

5.How we share information

We do not sell your personal information. We share it only in these limited circumstances:

• Service providers. We rely on trusted processors to run the service — including Supabase (database, authentication, and file storage), Vercel (application hosting), Google (OAuth sign-in), and Upstash (rate-limiting infrastructure). They process data only on our instructions.
• Public content. Posts, comments, your username, and your public profile are visible to other users and visitors by design.
• Legal requirements. Where required by law, regulation, legal process, or a valid government request, or to protect the rights, safety, and property of our users or the public.

6.Data retention

We retain your information for as long as your account is active or as needed to provide the service. Deleted content is soft-deleted and removed from public view, and is retained only for a limited period to support moderation, dispute resolution, and legal compliance before permanent deletion. When you close your account, we delete or anonymize your personal data unless a longer retention period is required by law.

7.How we protect your data

We apply industry-standard safeguards designed to protect your information, including:

• Encryption of data in transit over HTTPS/TLS, enforced with HSTS.
• Row-level security in the database so users can only access data they are authorized to see.
• Delegated authentication — we never store or see your Google password, and passwords are hashed by our authentication provider.
• Protections against common web risks, including input validation, secure session cookies, and hardened response headers (such as anti-clickjacking and content-type protections).
• Rate limiting and abuse controls on sensitive actions such as sign-in and content creation.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee its absolute security.

8.Your rights

Depending on where you live, you may have rights over your personal data under laws such as the EU/UK General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA). These may include the rights to access, correct, delete, port, or restrict the processing of your data, to object to certain processing, and to lodge a complaint with your local data protection authority. You may:

• Access and update your profile information from your account settings.
• Delete your posts and comments, or close your account.
• Request access, correction, or deletion of your personal data by contacting us at tglennleyesa@gmail.com.

9.Children's privacy

The service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will take steps to delete it.

10.International data transfers

Our service providers may process and store data on servers located in countries other than the one in which you live. Where personal data is transferred internationally, we take steps designed to ensure it continues to receive an adequate level of protection.

11.Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

12.Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at tglennleyesa@gmail.com. You can also review our Terms and Conditions.