Privacy Policy

Your account. An email address, a password, and a display name. We never see your password in readable form — sign-in is handled by Supabase, which stores it hashed.

What you write. Essays, comments, likes, and reports you submit, along with when you posted them.

Verification details, if you ask to be verified. Either a school email address you confirm with a code, or the school name, expected graduation year and any note you send for manual review. Professionals submit an organisation, role and supporting note.

Moderation state. Whether a comment of yours was flagged or hidden, a count of confirmed violations, whether your commenting is suspended, and any appeal you write.

Technical. A cookie that keeps you signed in. Our host keeps ordinary server logs. We do not use advertising or analytics trackers.

To run the site: show your work to the readers you chose, attribute comments, keep you signed in, let people report problems, and let administrators act on those reports. The verification details exist to support the badges. The moderation state exists so that repeat problems can be handled consistently and appealed.

We are a small project built on other people's infrastructure:

• Supabase — stores the database and runs sign-in. Effectively everything above lives there.
• Vercel — hosts and serves the site, and sees ordinary request traffic.
• OpenAI — receives the text of a comment when it is submitted, so it can be screened for abuse. Comment text is sent for that check. Essays are not sent.
• Resend — sends account emails such as confirmation, password reset and verification codes, and therefore handles your email address.

We do not sell your data or share it for advertising.

Posting anonymously hides your name from other readers. It does not hide it from site administrators, who can see the real author when handling reports and abuse.

Because that is a genuine privacy exception, it is logged: each time an administrator views the real author of an anonymous essay, an entry is written to an internal admin log, along with removals, verification decisions, moderation decisions and appeal outcomes. The log is visible to administrators only.

One cookie, used to keep you signed in. Clearing it signs you out. There are no advertising or cross-site tracking cookies.

• Change your display name, email address or password in account settings.
• Change an essay's visibility, or delete the essay, at any time.
• Block another user.
• Appeal a suspension or a hidden comment.
• Delete your account.

Deleting your account removes your essays and the comments on them. Comments you left on other people's essays are kept but reattributed to a placeholder "Deleted User" account with your name removed, so that other people's conversations stay readable. If you want those removed too, contact us and say which.

Content stays until you delete it or an administrator removes it. Moderation records and the admin log are kept so that decisions remain reviewable.

TBD — specific retention periods still need to be decided, and reviewed by a lawyer, before this section is final.

You must be at least 13 to have an account. If you are under 18, please go through this page with a parent or guardian before posting, and remember that a public or anonymous essay can be read by anyone.

If you are a parent or guardian and want an account or a piece of writing removed, contact us and we will act on it.

Sign-in and password storage are handled by Supabase. Access to the site's data is limited to administrators, and sensitive administrator actions are logged.

We cannot promise perfect security, and we would rather say that plainly than imply otherwise. Please don't put anything in an essay that would seriously harm you if it became public.

If we change this policy in a way that matters, we will say so on the site rather than quietly editing this page.

Questions, removal requests, or anything involving a child under 13: TBD — contact address to be added before launch.

Still to be settled with a lawyer: which data-protection laws apply to this audience and region, what rights follow from them, and whether a formal data processing agreement is needed with any of the providers above.