We collect the minimum data needed to run the Service: for example, your email address, an automatically generated username (which you can change), your votes, and technical information needed for security and reliability.
We may keep a limited history of changes to your display name and profile link while your account is active, to help prevent abuse, resolve disputes, and enforce these terms. You can see this history in your data export; it is removed when you delete your account.
We never store your raw IP address; we keep only a salted hash used to prevent abuse. From social logins we request only your email address. We do not sell your personal information. We may use processors (such as hosting, email, or security providers) under agreements that require appropriate safeguards.
Lawful bases (GDPR). We process personal data where necessary to perform our contract with you (providing the Service), where we have a legitimate interest (such as fraud prevention and platform security), and where you have given consent (for example, optional analytics and marketing email).
Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to or withdraw consent for certain processing. Signed-in users can export data, manage consent, or delete their account. You may also change optional cookie preferences at any time in the Cookies section below.
We retain data only as long as needed for the purposes above, unless a longer period is required by law or legitimate security needs. When you delete your account, we anonymize your profile and detach your votes from your identity while keeping aggregate tallies intact.