Privacy Policy
1. Overview
This Privacy Policy explains what information twewu ("the Service") collects, how it is used, and the choices you have. The Service is designed around data minimalism: we collect what is required to operate a public grid of posts, and nothing more. We run no advertising, no third-party analytics, and no cross-site tracking, and we do not sell or rent personal information.
2. Information We Collect
- Account information. Your handle, display name, avatar, and hashed authentication credentials. Passwords are stored only as salted cryptographic hashes; we cannot read them.
- Single sign-on. If you sign in with Google or X, we receive the basic profile your provider shares — name, email address, avatar, and your stable account identifier — used solely to create and authenticate your account.
- Content. Boxes, captions, comments, votes, uploads, and game results you create. The grid is public by design; a permanent public posting history supports your profile even after a box leaves the grid.
- Technical data. Standard server logs (IP address, request metadata, timestamps) generated automatically for security, rate-limiting, and abuse prevention, and retained on a short rolling basis.
3. Cookies and Local Storage
| Item | Type | Purpose | Lifetime |
|---|---|---|---|
| session | Essential cookie (HttpOnly, Secure) | Keeps you signed in | Until logout or expiry |
| preferences | Browser local storage | Tile colors, map position, dismissed notices | Stays in your browser; never transmitted |
That is the complete list. The Service sets no advertising, analytics, or tracking cookies. When you open a box containing embedded third-party media (YouTube, X, TikTok), that platform's player loads at your request and may set its own cookies under its own policy; until then, boxes display only thumbnails cached on our servers.
4. How We Use Information
- To provide, secure, and maintain the Service, including authentication and session management;
- To operate the Service's social and game mechanics (placement, vibes, aura, matches, notifications);
- To enforce rate limits, detect abuse, and protect users and infrastructure;
- To communicate service notices you have enabled (e.g., in-app notifications).
We do not use your information for advertising, profiling for marketing purposes, or automated decision-making with legal effect.
5. Sharing and Disclosure
- Public content. The grid is public: boxes, comments, votes' effects, profiles, and posting history are visible to anyone, including without an account, and may appear in link previews and share cards.
- Infrastructure. Data is processed on servers we operate with reputable hosting providers acting as processors on our behalf.
- Legal. We may disclose information where required by law or where necessary to protect the rights, safety, or integrity of the Service or its users.
- No sale. We do not sell, rent, or trade personal information, and we have not done so.
6. Data Retention
- Account data is retained while your account exists and is removed upon a verified account-deletion request, subject to short-lived backups purged in the ordinary course of operation.
- Public posting history is retained to preserve the coherence of the grid's shared record while your account exists; it is removed along with your account under the same process.
- Server logs are retained briefly for security purposes and then discarded.
- Uploaded media may persist in storage after a box leaves the grid until routine cleanup.
7. Your Rights and Choices
- Access and portability. Your content is visible on your public profile; you may request a copy of the data associated with your account.
- Deletion. You can delete any of your own boxes directly in the Service. You may request deletion of your account and associated personal data via the contact channel below; we honor such requests within the timelines required by applicable law (including, where applicable, the GDPR and the California Consumer Privacy Act).
- Correction. You can change your handle and profile details in Settings.
- Where applicable law grants additional rights (objection, restriction, complaint to a supervisory authority), you may exercise them through the same channel.
8. Security
We employ industry-standard safeguards appropriate to the scale of the Service: TLS encryption in transit, salted password hashing, HttpOnly/Secure session cookies, parameterized data access, upload screening, and rate-limiting. No online service can guarantee absolute security; we encourage strong, unique passwords.
9. International Processing
The Service is operated from the United States, and data may be processed on infrastructure in the United States and the European Economic Area. By using the Service you acknowledge processing in these locations, subject to the protections described in this Policy.
10. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided personal information, contact us and we will delete it.
11. Changes to this Policy
We may update this Policy from time to time. Material changes will be announced on the Service and reflected in the effective date above. Your continued use of the Service after changes take effect constitutes acceptance.
12. Contact
For privacy questions, data requests, or complaints, contact the operator: message @K8r on the grid, or use the email below (presented as an image to deter address-harvesting bots). We respond to verified requests promptly and within legally required timelines.
