Privacy Policy
Draft, updated Oct 29 2026. To be reviewed by a lawyer before launch. Not legal advice.
What we collect
- At signup: first name, email, country, your 18+ confirmation, your member ID, and which member's link (if any) referred you.
- Email confirmation: whether and when you confirmed your email. If you never confirm, your signup is deleted automatically after 7 days.
- Login: we use one-time email login links (no passwords) and one cookie,
s18, to keep you logged in for up to 30 days. It's needed for the site to work; we don't use advertising or tracking cookies. Logging out deletes the session. - Forum: what you post, your replies, upvotes and reports, and moderation decisions about your posts.
- Security: your IP address and email are used briefly to limit repeated attempts (counters expire within a day).
Why
To run your membership, log you in, credit the member who invited you, run the forum safely, and email you about your account and the hub.
Anonymous posts
In "Problems & feedback" you can post anonymously. Other members won't see your name, but moderators can, so they can keep the forum safe and follow up if needed.
Moderation and the removal log
Moderators review reported posts and posts held by automatic spam checks. If a post crosses a hard line it's removed, and the public removal log shows the date, the rule and the category. It never shows the removed content or who wrote it. We may add an automated helper that flags posts for a human moderator to review; a person makes every removal decision, and we'll update this policy before turning it on.
Who processes data for us
- Vercel hosts the website.
- Upstash stores member and forum data.
- Brevo sends our emails (confirmation and login links).
They process data for us under their own security and data-protection terms. We don't sell your data.
How long we keep it
Membership data stays while you're a member. Unconfirmed signups are deleted after 7 days. Login links expire after 20 minutes, confirmation links after 24 hours. Forum posts stay until you or a moderator remove them, or you ask us to delete your account.
Your rights
You can ask to see, export, correct, or delete your data at any time. We aim to follow GDPR, UK GDPR, and local law.