Privacy

Information we handle

• Account information you provide, such as email address, display name, optional country, profile details and sign-in provider.
• Content and activity you choose to create, including posts, comments, reactions, letters, bookmarks, uploads, reports, check-ins and Collector activity.
• Security and service records needed to operate the site, such as session identifiers, privacy-preserving rate-limit fingerprints, device/browser details, error logs and audit records.
• Preferences stored in cookies or local storage, including language, theme, intro completion, audio choices and other interface settings.

How the information is used

• To create and secure accounts, keep sessions working and prevent spam or abuse.
• To publish the contributions you ask us to publish and provide community, notification, mission and collection features.
• To moderate reports, honour takedown requests, correct errors and keep an action history for safety and accountability.
• To understand failures and maintain the archive. The project does not sell personal information or use it for behavioural advertising.

Email and account access

We use your email address only to create or link your account, sign you in, verify account ownership, help you recover access, and send security or essential account notices.

We do not sell email addresses or provide them to advertisers. Marketing email, if it is introduced later, is separate and requires its own opt-in and unsubscribe option.

If you choose social sign-in, the provider shares your verified email for these account purposes after you approve its consent screen. We do not request your contacts or social graph.

Public information

A display name, avatar, public profile details and anything you publish to Community may be visible to anyone and may be indexed or shared outside the site. Do not include private information in a public post. Reports, account email, session data and private moderation notes are not public.

Services that help run the site

The site currently uses Vercel for hosting, Supabase for database, authentication and file storage, Cloudflare Turnstile for abuse protection, and email delivery for account messages. If you choose a social sign-in provider or open an external YouTube or other media link, that provider handles the information you send under its own privacy terms.

These services may process information in countries different from yours. We share only what is needed to provide the feature you chose or to keep the service secure.

Retention

Member-written content and its moderation record remain while the content or account remains, unless a correction or removal request applies. Operational data has shorter windows: notifications and sent announcements are removed after 7 days; completed letter-reading sessions after 30 days; system and ingest logs after 90 days; and security/audit records may be kept for up to 2 years. Expired sessions, rate-limit windows and used security tokens are removed sooner.

A takedown can stop an image or card from being served while retaining the minimum record needed to show what action was taken.

Your choices and requests

You can update many profile and notification choices from your account. Through the Feedback page, you may ask what information we hold about you, request a correction, ask for removal where appropriate, or raise a privacy concern. We may need to verify that the account or material belongs to you before acting.

Privacy rights vary by location. Nothing on this page limits rights that apply to you under local law.

Children and changes

If you are below the age at which you can consent to an online account where you live, use the public archive without an account or ask a parent or guardian first.

When this policy changes materially, the version at the bottom of the page changes too.