Privacy policy
What this site collects, why, and how long it is kept.
What is collected
If you create an account: your email address, username, display name, password (stored only as an Argon2id hash), and anything you choose to add to your profile or post. If you use the contact form: your name, email address, and message. If you subscribe to the newsletter: your email address and the time you gave and confirmed consent.
Cookies
One essential cookie keeps you signed in. It is HttpOnly, contains a random token (never your password), and expires after a fixed period or when you sign out. Your theme preference is stored in your browser. No advertising or cross-site tracking cookies are used.
Analytics
If analytics are enabled, they are privacy-focused and cookieless, and record only aggregate page views and simple events. Message content, form text, and account details are never sent to analytics.
Private messages
Direct messages are visible only to the members of the conversation and to moderators when a message is reported. They are encrypted in transit (TLS) and at rest by the hosting providers, but they are not end-to-end encrypted.
Account emails (verification, password reset) are sent by a transactional email provider. Newsletters are sent only after you confirm your subscription, and every newsletter has a one-click unsubscribe link.
Retention
Contact form messages are deleted after a limited retention period. Expired sessions and one-time tokens are removed automatically. Reports and moderation records are kept as long as needed to investigate abuse and enforce the community guidelines.
Your choices
You can edit your profile, choose whether it is public or visible only to members, decide whether it appears in search, download a copy of your data, and delete your account from your account settings. Deleting your account removes your profile and personal details; some records may be retained where needed for safety or legal reasons.
Contact
Questions about privacy can be sent through the contact page.