Privacy Policy

1. What Data We Collect & Why

1.1 Comments

• Data entered in the comment form
• Visitor’s IP address and browser user agent to prevent spam
• Hashed email (for Gravatar profile pictures)

After approval, your profile picture may be visible publicly.

1.2 Media Uploads

Avoid uploading images with embedded EXIF location data—you should treat them as public.

1.3 Contact Forms

Information provided in contact forms may be stored and used to process your requests.

1.4 Cookies

• Comments: Save your name, email, and website for one year.
• Login page: Temporary cookie to detect cookie support (cleared on browser close).
• Login session: Login cookies (2 days), screen options (1 year), “Remember Me” (2 weeks).
• Post edits: One-day cookie to store last edited post ID.

1.5 Embedded Content

Embedded content (e.g. videos, images) from other websites may collect data and track your interactions as if you visited that website.

1.6 Analytics

Our site may use analytics tools to improve user experience.

2. Who We Share Data With

Visitor comments may be checked against automated spam monitoring services.

3. Data Retention

• Comments and related metadata are kept indefinitely.
• Registered users can view and edit all personal data in their profile (except username).
• Admins can view/edit user data.

4. Your Rights

You can request a copy of your personal data or request deletion (excluding data we must retain for legal/security reasons).

5. Where We Send Your Data

Comments are processed by automated anti-spam systems. Other data may be shared only as necessary for feature delivery or legal compliance.

6. Contact Information

If you have questions or want to exercise your data rights, please contact us.

7. Additional Details

7.1 Data Protection

We apply appropriate security measures to protect your personal data.

7.2 Data Breach Procedures

We follow strict protocols in the event of any data breach.

7.3 Third‑Party Data Sources

We receive data only from services you directly interact with (e.g. contact forms, Gravatar).

7.4 Automated Decision‑Making

We do not profile users or make automated decisions based on personal data.

7.5 Regulatory Disclosures

We comply with all relevant regulatory requirements (e.g., GDPR).