Last updated: September 2026. Operators: review and adapt this template to your jurisdiction (GDPR, CCPA, etc.) before launch.
What we store
Your email, username, display name, hashed password, profile details, and the content you create (posts, comments, likes, follows, messages, uploads). We store session information (browser and IP) so you can review and revoke signed-in devices.
How we use it
To run the service: show your content, deliver notifications and messages, keep the platform safe, and calculate XP and leaderboards. We do not sell your data.
Passwords & security
Passwords are hashed with scrypt and never stored in plain text. Session tokens are stored hashed. Cookies are HTTP-only.
Your controls
You can edit your profile, download all your data (Settings → Account), block or mute users, and permanently delete your account and content at any time.