Privacy

• An account: email address, username, a password hash, and any profile text you choose to add. Social sign-in, when offered, gives us the identifier the provider returns and nothing more.
• Your contributions: wiki revisions, posts, comments, votes, uploads, and the times they were made. Revisions are kept in full so history and attribution work.
• Operational records: the IP address and user agent of requests, kept in short-lived logs for abuse prevention and debugging.
• The follow list: an email address, if you give one, used only for build notices and the dev log.

• No advertising, ever, and no advertising trackers.
• No third-party analytics scripts on first paint. Any measurement is cookieless and aggregated.
• No selling or sharing of personal data with anyone for their own purposes.

A session cookie signs you in and a CSRF token protects forms. Both are essential. A preference cookie may remember choices such as reading mode. Nothing else is set without asking.

The site runs on cloud providers in the United States: the database and the API are hosted in the US East region, uploads in object storage there, and the site is served through a content delivery network. Transactional email is sent through an email service provider. Each provider processes data only on our instructions.

Account data is kept while the account exists. Deleting an account removes the email and profile; public contributions stay, attributed to the username, because the wiki licence and the forum's continuity depend on it. Request logs are kept for a short period and then discarded. The follow list is deleted on unsubscribe.

You can see, correct and export the data held about you from the account settings once they open, and you can ask for deletion. Where the law gives you further rights, you have them. A contact address for privacy requests is published with the first public build.

Accounts are for people aged 13 and over. If we learn that a younger child has made an account we remove it.