Last updated: March 17, 2025
1. Controller and Contact
Controller: Topics
2. Data We Store
- Account: Username, display name, email, password hash, bio, avatar, website, location
- Content: Topics (posts), media uploads, replies, likes, echoes, bookmarks
- Social: Follows, linked accounts
- Technical: Session tokens, IP addresses, user agents, logs for security and operations
3. Legal Basis (Art. 6 GDPR)
- Contract (Art. 6(1)(b)): Account creation, login, profile management, content hosting
- Legitimate interest (Art. 6(1)(f)): Abuse prevention, security, debugging, analytics to improve the service
- Consent (Art. 6(1)(a)): Optional features when you opt in
4. Cookies and Sessions
We use strictly necessary session cookies to keep you signed in and protect actions. No optional tracking cookies are set.
5. Data Sharing
Public profile and post data may be visible to other users. We do not sell personal data. Data may be shared only with processors (e.g. hosting) under contractual safeguards.
6. Your Rights (Art. 15–22 GDPR)
- Access (Art. 15): Request a copy of your data via Settings → Export my data
- Rectification (Art. 16): Update your profile in Settings
- Erasure (Art. 17): Delete your account in Settings → Delete account
- Restriction (Art. 18): Contact us to limit processing
- Portability (Art. 20): Data export provides a portable format
- Object (Art. 21): You may object to processing based on legitimate interest
- Complaint: Lodge a complaint with your supervisory authority
7. Retention
We retain account and content data as long as your account exists. After deletion, we anonymize or remove data according to our retention policy. Sessions and logs are purged automatically.
8. Consent
By registering, you accept this Privacy Policy and our Terms of Service. We store the version and timestamp of your acceptance as proof of consent.