Privacy Policy

Data Controller

This platform is operated by [LEGAL_ENTITY_NAME]. For privacy-related inquiries, contact [CONTACT_EMAIL].

Information We Collect

This platform collects only the information necessary for secure operation, content moderation, legal compliance, and service improvement. The categories of data we collect are:

Account and Login Data

Email address, username, password hash (not plaintext), account creation timestamp, login timestamps, and session identifiers. This data is essential for authentication, account management, and security.

Upload and Moderation Data

Content metadata, source declarations, upload timestamps, moderation status, and moderation notes. This data is retained for content moderation compliance and audit purposes.

Admin Audit Logs

Immutable records of admin actions including login attempts, content moderation decisions, configuration changes, and user management operations. Audit logs are retained for security investigations and compliance reporting.

Session and Cookie Data

Session cookies for authentication, an age-verification cookie (adult_age_ok) to record age confirmation, and essential technical cookies required for platform operation. No third-party tracking cookies are used.

Security Logs

IP addresses, request metadata, rate-limit events, blocked region access attempts, and failed authentication events are logged for security monitoring and abuse prevention. These logs are retained in accordance with the platform retention policy.

Takedown Request Data

Claimant contact information, content URL, reason for request, and any uploaded proof documentation. This data is collected to process takedown requests and maintain compliance records.

How We Use Your Information

We use the collected information for the following purposes:

• Operating, securing, and improving the platform.
• Authenticating users and maintaining session integrity.
• Moderating content in accordance with the Content Policy.
• Processing and responding to takedown requests and abuse reports.
• Complying with legal obligations and responding to lawful requests.
• Investigating security incidents, policy violations, and prohibited activity.
• Maintaining immutable audit records for compliance and transparency.

We do not use your data for targeted advertising, profiling, or any purpose not disclosed in this policy. We do not sell your personal information to third parties.

Data Retention

Account data is retained for the duration of your account and for a reasonable period after account closure to satisfy legal obligations. Audit logs are retained for the period defined by the platform retention configuration. Takedown request records are retained for compliance purposes. You may request deletion of your personal data subject to legal retention requirements.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data, subject to legal retention obligations.
• Restrict or object to processing in certain circumstances.
• Receive your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise your rights, contact [CONTACT_EMAIL]. We will respond within the timeframe required by applicable law.

Third-Party Services

This platform does not currently integrate third-party analytics, advertising, or tracking services. Future integrations will be disclosed in an updated privacy policy. In production, the platform may use infrastructure services (cloud hosting, content delivery, email delivery) that process data on our behalf under contractual data processing agreements.

Data Security

We implement technical and organizational measures to protect your data, including encryption in transit, session security controls, access restrictions on administrative functions, immutable audit logging, and rate limiting. No system is impenetrable, and we cannot guarantee absolute security.

Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated through the platform. Continued use after changes take effect constitutes acceptance of the updated policy.