Privacy Policy

Information We Collect

We only ask for what we actually need. Here is a plain-language breakdown of the three categories of information we may gather.

How We Use Information

We use the information we collect to run the platform and improve your experience — nothing else.

• Provide the service. Your account data lets you log in, create boards, follow curators, and interact with the community.
• Personalise your feed. We use your follows, likes, and browsing activity to surface content that matches your tastes — entirely on our own infrastructure.
• Send you notifications. With your consent we send transactional emails (password resets, follower alerts) and, if you opt in, occasional digest emails about trending content. You can unsubscribe at any time from your settings page.
• Maintain safety and integrity. Usage logs help us detect abuse, spam, and unauthorised access attempts so we can protect all users.
• Improve the product. Aggregated, anonymised analytics tell us which features people love and where we can do better. We never sell or share this data with third parties for advertising.

Information Sharing

We do not sell your personal data. Full stop.

We may share limited information only in these specific circumstances:

• Infrastructure providers. Our hosting and storage partners process data on our behalf under strict data-processing agreements. They act on our instructions only and are prohibited from using your data for their own purposes.
• Legal obligations. We may disclose information if required to do so by a valid court order, subpoena, or applicable law. We will notify you unless legally prohibited from doing so.
• Business transfers. In the unlikely event of a merger or acquisition, your data may transfer to the new entity, which would be bound by this policy or a materially equivalent one.
• Public content. Any board or comment you mark as public is visible to all visitors by design — that is the core function of the platform.

Data Retention

We keep your data for as long as your account is active or as needed to provide you with the service.

Specifically:

• Active accounts. Your profile, boards, and uploaded images are retained as long as your account exists.
• Deleted accounts. When you delete your account, your personal data is purged within 30 days. Publicly visible content (e.g. comments on community boards) may be anonymised rather than removed to preserve the integrity of conversations.
• Server logs. Raw access logs are retained for up to 90 days for security monitoring, then permanently deleted.
• Backups. Encrypted backups may retain data for up to 30 additional days beyond the above windows before being overwritten.

Security

We take security seriously and apply industry-standard practices to protect your data.

• Encryption in transit. All data between your browser and our servers is transmitted over HTTPS using TLS 1.2 or higher.
• Password hashing. Passwords are hashed using bcrypt with a high cost factor. We never store or log plain-text passwords.
• Encrypted backups. Database backups are encrypted at rest and stored in isolated, access-controlled environments.
• Breach notification. If a breach affecting your data occurs, we will notify you within 72 hours of becoming aware, consistent with GDPR Article 33 obligations.

Cookies

We use a minimal set of cookies that are necessary to operate the platform. We do not use third-party advertising cookies.

You can disable cookies in your browser settings, but please note that core features — including logging in and creating boards — rely on the session cookie and will not work without it.

Your Rights

Under the GDPR and similar regulations, you have meaningful control over your personal data. We honour all of the following rights.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you have the right to lodge a complaint with your local data protection authority.