DISCLOSURE
Privacy
A plain-language description of what this site actually does with your data. Not a legal document, just an honest account.
What's collected
If you submit a story or join the community, we collect an email address. It's used only to send you a one-time verification or sign-in link. It's never shown to other members, never shown publicly, and never used for anything besides that single link.
Community accounts also store a display name (doesn't need to be your real one), a self-reported age range, an optional region (a broad area like “US – West,” never a city or exact location), and an optional bio. All of it is public, because it's what a post is attributed to.
What's not collected
- No IP address is ever stored in plaintext. Submissions hash it (one-way, unrecoverable) purely to rate-limit abuse. That hash is never shown anywhere, including to admins.
- No location, device, or browsing-history tracking. No analytics scripts, no ad trackers.
- No real-name or identity verification of any kind. Display names and ages are exactly as reliable as the honor system they run on.
Photos
Every photo uploaded anywhere on this site, whether in blog posts, the archive, or community submissions, has its metadata (location, device, timestamp) stripped automatically before it's stored, by re-encoding the image server-side. This isn't optional and doesn't depend on you remembering to do it yourself.
Cookies
One functional cookie if you're logged into a community account, another if you're the site admin. Both just keep you signed in. No tracking, no third-party cookies.
Who else touches this data
The site runs on Supabase (database + file storage), Resend (sending the verification/sign-in emails), and Cloudflare Turnstile (spam/bot protection on forms). Your email passes through Resend to deliver that one link; Turnstile sees that you're filling out a form, not what you wrote in it. None of the three are given anything beyond what's needed to do their one job.
Deleting your data
Delete your own community posts any time from the post itself. For anything else, like closing an account entirely, pulling a submission, or a records question not covered here, reach the site owner directly. There's no self-serve account deletion yet.