Privacy Notice

What we collect

• Account: username, password hash (argon2id), join date, role.
• Profile: optional bio.
• Content: posts, comments, private messages, uploaded images.
• Operational logs: IP address (transient, in Cloudflare and origin logs), session token (hashed), browser user-agent string. Logs rotate within days.
• We do not ask for your email address. We do not run analytics.

Why we collect it

To run the site: authenticate you, show your content to others as you direct, deliver private messages, prevent abuse, and meet our legal obligations.

Who we share it with

Nobody, except the third parties that operate the infrastructure underneath us:

• Cloudflare (DNS, CDN, WAF, CSAM hash scanning) - traffic transits their network.
• Hetzner Cloud (Germany) - hosts the server.
• Backblaze B2 / Cloudflare R2 (EU) - encrypted backups.
• Anthropic (USA) - if LLM-assisted moderation is enabled, post and comment text is sent to their API for classification. No personal identifiers are sent.
• Lawful authorities, where the law requires it.

How long we keep it

Account and content: as long as your account exists. Backups: at most 90 days. Operational logs: typically days, never longer than 30 days.

Your rights under the GDPR

You have the right to access, rectify, erase, restrict, port, and object to the processing of your data. To exercise any of these, email [email protected]. We respond within 30 days.

Cookies

Two cookies, both first-party: a session cookie (so you stay logged in) and a theme cookie (so we remember day/night). No tracking cookies. No third-party cookies.

Contact

Data controller: the site owner. Contact: [email protected].