Privacy Policy

What we store, and why

Your account. Your email address and a securely hashed password (we never see the password itself), plus the username, display name, and optional bio you choose. Used to sign you in and show who wrote what.

What you post. Your discussions, comments, votes, and any reports you file. That's the community itself.

Forms you submit. If you join the newsletter or contact us through a form, we store the email address and the details you typed so we can respond or send you what you asked for.

Anonymous usage data. To understand how the site is working — which pages are visited, how far people scroll, which buttons are used — we collect aggregate, first-party analytics with no advertising trackers. This data is never linked to your account: no names, no emails, no user IDs, no precise location, no device fingerprint, no cross-site tracking. It is keyed only to a random, temporary session number that expires after 30 minutes of inactivity. Raw records are automatically deleted after 90 days; only anonymous totals are kept longer. Admin and sign-in pages are never tracked at all.

Cookies & local storage

We use no advertising, analytics, or third-party cookies, which is why you don't see a cookie consent banner here — there is nothing optional to consent to. The complete list:

• Sign-in cookies (names starting with sb-) — set only when you sign in, and strictly necessary to keep you signed in.
• Analytics session number — a random ID in your browser's session storage that disappears when you close the tab or after 30 minutes idle. It identifies a visit, never a person.
• Your opt-out choice — if you turn analytics off with the switch above, we remember that choice in local storage so it sticks.

We also honor your browser's Do Not Track and Global Privacy Control signals automatically — if either is on, analytics never run.

Emails we send

Transactional only: email confirmation, password resets, admin invitations, and replies to things you sent us. The newsletter goes only to people who signed up for it. No marketing lists are bought, sold, or shared.

Who processes data for us

We don't sell or share your data with advertisers. Three services process it on our behalf, under their own security commitments: Supabase (our database and sign-in, hosted in the United States), Netlify (website hosting and form notifications), and Resend (delivering the transactional emails above).

How long we keep things

• Account data and content: until you delete them.
• Raw analytics: 90 days, then automatically purged.
• Form submissions: until handled, and removed on request at any time.

Your rights & controls

Everything below is self-service in Settings — no email required, no waiting:

• See and correct your profile and account details.
• Download everything we store about you as a JSON file.
• Delete your account — immediate and permanent, removing your profile, posts, comments, and votes. Because analytics were never tied to you, there is nothing there to clean up.
• Opt out of analytics with the switch at the top of this page — no account needed.

For anything else — including removing a form submission — email us and we'll take care of it.

Children

The community is for adults. We don't knowingly collect information from anyone under 18; if you believe we have, tell us and we'll delete it.

Changes

If this policy changes materially, we'll update it here with a new effective date.

Contact

Questions? Email contact@letlovework.org.