Legal

Privacy notice

What daforum stores, why, and what you can do about it.

What is stored

Account details
Username, display name, email address, and a bcrypt hash of your password. The password itself is never stored and cannot be recovered — only reset. The version of the terms you accepted is recorded, along with the date you confirmed you are an adult.
Sessions
One row per signed-in device, holding a hash of the session token (not the token), the user agent, the time it was created and when it expires. Sessions last 30 days and can be ended individually or all at once from account settings.
Content you create
Posts, replies, quotes, uploaded media, captions, tags applied, collections and messages. Uploaded files are also stored, with their dimensions, size, MIME type and hashes used for duplicate detection.
Upload attestations
When you upload, your confirmation that you hold the necessary rights is recorded against the file, together with the terms version, so that a rights enquiry can be answered later.
Activity
Likes, follows, bookmarks, read positions (which post you had reached in a thread), search history, and which settings you have changed. Read positions and history exist to power “continue reading” and can be paused or cleared from settings.
Moderation records
Reports you file, warnings and enforcement actions taken against an account, and rights cases. These are kept even when the content they concern is removed, because they are the record of a decision.

Cookies

Two cookies are used, both strictly necessary: one holds your session, and one records that you have passed the age gate and accepted its statement. There is no advertising or third-party analytics cookie, and no tracking script from another company.

Who else sees it

Nobody commercially. Two processors are involved in operating the site: the object storage provider that holds uploaded files, and the mail provider that delivers account emails (address confirmation and password resets). Their location, and any transfer safeguards that apply, are for the operator to state. Data controller and contact address: to be provided by the operator.

What is visible to whom

Your username, display name, avatar, bio, location, website, reputation score and joined date are public unless a setting says otherwise, as is the content you post. Your email address is never shown to another member. Likes, direct messages and mentions each have their own visibility setting. Blocking a user hides each of you from the other, and muting hides content without telling them. Direct messages are visible only to the participants of the conversation.

Your controls

Removal and retention

Removing content you posted takes it out of every surface at once. Moderator removals and bans retain a record of the action. Upload attestations, reports, moderation actions and rights cases are retained as the audit trail for those decisions. Specific retention periods and the process for requesting a copy or deletion of your account data: to be provided by the operator.

Terms of useDMCA policyHelpReturn to the site