Privacy Policy

Effective Date: October 12, 2026

1. Information We Collect

We collect information you provide directly to us when registering an account, such as your username, email address, password hash (salted using Argon2id), and profile bio.

2. Cookies & Session Management

We use secure, opaque HTTP cookies (`__Host-session`) to maintain authenticated sessions with CSRF protection. We do not store sensitive passwords in plain text or sell user personal information to third parties.

3. Account Deletion & Right to Forget

You can request full account deletion at any time via your account settings page. Deletion schedules all personal records and active sessions for permanent erasure.