Privacy Policy
Last updated: 2026-10-16
01Account data: email address, handle, display name and optional avatar. Auth is handled by Supabase (EU/US regional hosting).
02Guest voting uses a device fingerprint: a one-way SHA-256 hash of salt + IP + user agent + language. The salt never leaves the server; we cannot reconstruct your IP from it. Fingerprinting is used to stop duplicate and abusive voting (legitimate interest).
03We honor Do Not Track: when your browser sends DNT, guest votes still work but are rate-limited by IP only.
04We do not sell personal data. No third-party advertising trackers. Analytics, if enabled, are cookieless.
05Your applications and votes stay on the Plaza as community content. Deleting your account logically deletes your profile (display name becomes "deleted-user"); content is unlinked from your identity. You can request full deletion or export of your data at any time.
06Contact: [email protected] (placeholder until the production domain is set).