We store as little information on our users as possible, as our intention is to hold no non-public information.
The signup process
Upon signup, users are required to provide the following:
- a username
- a password
Optionally, users can provide:
- an email address
Upon signup, we:
- hash (bcrypt) the provided email address
- hash (bcrypt) the password
- hash the user’s peppered IP address (excluding accounts created before February 26th, 2021)
We store the provided username, password hash, IP hash, optional email hash, and various platform-related metrics, such as which community drove the signup.
We do not verify that the provided email address is valid.
After that
During use of our sites, we store a hash of the user’s latest IP address, which is overwritten every time it changes.
When uploading media content (such as images), we may store a hash of the user’s IP address, due to the content that could be uploaded.
We do not store access logs for either users or guests.
We do not store legal names, SMS data, health or financial information, or any other private information not listed in this document.
Account Deletion
When a user deletes their account, we wipe their post, comment, and message history. We also wipe their last known IP address, their signup IP address, their email hash, and their password hash.
Why we store so little data
We do not need data, it is not our business model, and it is nothing but a liability. We want to minimize the data that we are responsible for.
Compliance
We would be required to comply with valid legal requests.