Privacy Policy

Effective 2026-07-10

1. What we collect

Your email address (for sign-in), the content you post (posts, replies, likes, follows), and security logs. Sign-in security events include your IP address, which is automatically deleted after 90 days; only the event record itself is kept for audit.

2. Cookies

We set a session cookie strictly for keeping you signed in, and a CSRF token cookie for security. No tracking or advertising cookies.

3. Third parties

Authentication is provided by Supabase; your email and password are processed by Supabase under their terms. We do not sell or share your data with anyone else.

4. Account deletion

You can delete your account at any time from the app. Deletion removes your email, sign-in identities and display name, and signs you out everywhere. Your posts and replies remain, shown as "[deleted]", to keep other people's conversations intact.

5. Contact

For privacy questions, contact the operator at the email address published on this site.