Privacy Policy

Template — review by counsel before public registration.

Data we hold

• Email address (required for passwordless login)
• Display name / username / IP / user-agent (login + audit)
• Posts, reactions, proposals (your contributions; CC-BY-SA)
• DKIM domain (for vendor verification, only if your MTA forwards it)

What we do not collect

• No third-party analytics, no trackers, no advertising IDs.
• No social fingerprints. No location.

Sharing

Approved mitigations are published into VIR as community-verified entries with your selected attribution (display name / username / pseudonym / anonymous). No other personal data is shared.

Retention

Account data: indefinite while active. Magic-link tokens: 30 minutes. Sessions: 24h sliding. Audit chain: indefinite (tamper-evident; required for moderation provenance).

Your rights

You may export, correct, or delete your account. Deletion removes profile + email; content under CC-BY-SA remains attributed to the username or "deleted user" per your last preference.

Security

Ed25519 signing on outbound payloads; passwordless auth; per-IP rate limits; AI spam screen for newcomers.

Contact

privacy@lbreeze.com