Privacy Policy
Template — review by counsel before public registration.
Data we hold
- Email address (required for passwordless login)
- Display name / username / IP / user-agent (login + audit)
- Posts, reactions, proposals (your contributions; CC-BY-SA)
- DKIM domain (for vendor verification, only if your MTA forwards it)
What we do not collect
- No third-party analytics, no trackers, no advertising IDs.
- No social fingerprints. No location.
Sharing
Approved mitigations are published into VIR as community-verified entries with your selected attribution (display name / username / pseudonym / anonymous). No other personal data is shared.
Retention
Account data: indefinite while active. Magic-link tokens: 30 minutes. Sessions: 24h sliding. Audit chain: indefinite (tamper-evident; required for moderation provenance).
Your rights
You may export, correct, or delete your account. Deletion removes profile + email; content under CC-BY-SA remains attributed to the username or "deleted user" per your last preference.
Security
Ed25519 signing on outbound payloads; passwordless auth; per-IP rate limits; AI spam screen for newcomers.
Contact
privacy@lbreeze.com