Privacy policy

This is a working draft for the platform's first release and should be reviewed by qualified counsel before public launch.

What we collect

• Account data: email address, a hashed password, your username and the profile details you choose to add.
• Content: articles, comments, reactions, bookmarks and follows you create.
• Usage: anonymous article view counts used to show authors how their work is read. We do not sell data or run third-party advertising trackers.
• Security: rate-limit records keyed to your account or network address, kept for at most 24 hours.

Cookies

We use one essential, HTTP-only session cookie to keep you signed in, and local storage to remember your light/dark preference. No consent banner is needed because nothing non-essential is set.

Your rights

You can edit your profile, export your articles and delete your content at any time from your dashboard. You can request a full copy or deletion of your account data; where GDPR applies you also have rights of rectification, restriction and objection.

Connected services

When OneTree Connect launches, social accounts will be linked only through official OAuth flows. We will never ask for or store your social media passwords, tokens are encrypted at rest, and you can revoke access at any time.