Privacy

Privacy

This is a working draft for review before public launch.

Data used

Registration stores a name, email and protected password hash. Sign-in uses a random token in an HttpOnly cookie; only its hash is stored in the database. Listings contain a description, photo, city and selected attributes. Language and saved items remain in the browser.

Public information

Published listings and the giver's name are visible to visitors. Contacts entered in a listing description are public as well. Do not publish another person's personal data.

Access and storage

The administrator can review pending listings and manage categories, filters and pages. Data is stored in the project's PostgreSQL database. Account deletion and data export are not yet self-service features; they need to be added before public launch.

Recovery and ads

If SMTP is configured, a one-time password reset link is sent to the provided email. External ad networks are off by default; this text must be updated before enabling one.