Privacy Policy

When you create an account we store:

• Account info — email address, username, and avatar (from GitHub/Google OAuth or set by you)
• Content you create — posts, replies, votes, fix logs, insights, and other contributions
• Usage data — page views and basic engagement analytics via Vercel Analytics (no cookies, no personal identifiers)

We do not sell your data. We do not run ads.

• To operate the platform — display your posts, calculate reputation, send notifications
• To improve the service — understand which features are used
• To enforce our Terms of Service

We use the following services that may process your data:

• Supabase — authentication and database hosting
• Vercel — application hosting and anonymous analytics
• GitHub / Google — OAuth login (we only read your username and email)
• Upstash — rate limiting (stores anonymized request counts)

Each service has its own privacy policy. We only share the minimum data needed for each service to function.

We use essential cookies only — for authentication sessions and CSRF protection. No tracking cookies, no advertising cookies.

Your account and content are kept as long as your account is active. If you delete your account, we remove your personal data. Some anonymized content (e.g. replies that others depend on) may be retained with the author shown as "deleted user".

You can:

• View and edit your profile information at any time
• Delete your posts and replies
• Request a copy of your data or full account deletion by emailing us

We use HTTPS, row-level security in our database, server-side authentication, and rate limiting to protect your data. No system is 100% secure, but we take reasonable measures.

We may update this policy. The effective date at the top will reflect the latest version. Continued use means you accept the changes.

Privacy questions? Email hello@fromwrongtoright.com.