Privacy Policy

We collect the minimum necessary to operate the platform.

A. Information you provide

• Your school email address (for authentication)
• A pseudonymous display name you choose (shown publicly)
• The content you submit (issues, voices, status updates, takedown requests)
• Optional location text on your posts (e.g. building name); we do not collect device GPS or precise geolocation

B. Information collected automatically

• Server logs: IP address, request path, timestamp, user agent (retained for security and abuse handling)
• Authentication tokens stored as HTTP-only cookies on your device

C. We do not collect

• Real name, phone, mailing address, student ID, or government ID
• Sensitive personal information as defined by CPRA
• Precise geolocation
• Biometric data

• To operate, secure, and maintain the platform
• To verify you're affiliated with a participating campus (via your school email domain)
• To handle moderation, abuse, and content-policy violations
• To enforce our Terms of Service, including takedown response
• To comply with legal obligations and respond to lawful requests

We do not use your information for behavioral advertising or to build advertising profiles. We do not train AI models on your content.

Public content

Your display name and the content of your published posts are public. Anyone can read them. If you flag a post as anonymous, your display name is hidden in the public view but moderators can still see who posted.

Service providers

We share limited data with these providers, who act on our behalf:

• Supabase (database, authentication, storage)
• Vercel (web hosting, edge network)
• OpenAI (content moderation API — receives the text of your post for automated flagging only; not used for training per OpenAI API terms)
• Google Fonts (Inter font asset; receives your IP address)

Legal requests

We may disclose information if compelled by valid legal process (subpoena, court order). Where lawful, we will notify you before complying. We will challenge requests we believe are overbroad.

Sales / Sharing for advertising

We do not sell your personal information. We do not share it for cross-context behavioral advertising.

California residents have the following rights regarding their personal information:

• Right to know — request a copy of the personal information we hold about you
• Right to delete — request deletion of your personal information, subject to legal exceptions
• Right to correct — request that we correct inaccurate personal information
• Right to opt out of sale or sharing — already in effect, since we do not sell or share for advertising
• Right to limit use of sensitive personal information — already in effect, since we do not collect sensitive personal information beyond your school email
• Right to non-discrimination — we will not deny service or charge different prices based on exercising these rights

To exercise these rights, email privacy@example.com from the email associated with your account, or use the form at /takedown and select the “privacy request” reason. We will respond within 45 days, with a possible 45-day extension if the request is complex (we'll notify you).

You may also designate an authorized agent to make a request on your behalf. We may require the agent to provide signed permission and verify your identity directly.

During the preceding 12 months, we have collected the following CCPA-defined categories of personal information from users:

• Identifiers: email address (for auth); pseudonymous display name; IP address (in server logs)
• Internet or other electronic network activity: request paths, timestamps, user agent
• Inferences: none drawn for advertising or profiling

We have not sold or shared (as those terms are defined under CCPA) any of the above in the preceding 12 months.

We retain your account data and posts for as long as your account is active. If you delete a post, it is removed from public view immediately and purged from server backups within 30 days.

If you delete your account, your profile is anonymized immediately — your display name is replaced with “[deleted]” and sign-in access is revoked, so you can no longer log in to that account. Your past contributions remain for the historical record but no longer show your name, and the personal email associated with the account is removed from the account record on deletion.

We retain server logs for 90 days for security purposes.

We use industry-standard practices: HTTPS for all traffic, database encryption at rest, hashed authentication tokens, row-level security policies. No system is perfectly secure; if you discover a vulnerability, please report it to security@example.com.

Posts flagged as anonymous hide your display name from the public view. Moderators retain the ability to associate posts with the posting account in order to handle abuse, threats, or violations of the Terms of Service. Your real email is never displayed to the public, regardless of the anonymous flag.

The platform is intended for users aged 18+ enrolled at a participating university. We do not knowingly collect information from children under 13.

We may update this Policy. Material changes will be posted on this page with a new effective date and announced in-app or by email. Continued use after a change constitutes acceptance.

Questions or privacy requests: privacy@example.com.