Privacy & data handling

Data we store

We store account email, hashed password, display name, session tokens in hashed form, reviews, reports, timestamps, and moderation history. Public reviews do not reveal author email or account identifiers. Administrators can associate an account with its submissions for abuse prevention.

How data is used

Account information is used to authenticate users and protect the platform. Ratings and approved comments are shown publicly. We do not sell user data. Essential session and CSRF cookies enable authentication and security.

Retention and requests

Operational logs, review moderation and account records require a documented retention and deletion process before a public rollout. Contact details and formal privacy terms must be supplied by the site operator. This page is a starter policy, not legal advice or a substitute for a reviewed privacy policy.