Privacy Policy

1. Information We Collect

We collect the following information when you use CTB:

• Account data: email address, username, password (hashed, never stored in plaintext)
• Profile data: avatar image, bio (optional, provided by you)
• Usage data: IP address, browser type, pages visited, actions taken on the Platform
• Content: posts, comments, and other content you create

2. How We Use Your Information

• To provide and operate the Platform
• To authenticate your account and ensure security
• To send notifications you have opted into
• To enforce our Terms and Community Guidelines
• To improve the Platform

3. Data Processors

We use the following third-party services to operate CTB:

• Supabase — database and authentication (your data is stored on Supabase-managed infrastructure)
• Cloudinary — image hosting and storage for avatars and post images
• Netlify — web hosting and deployment

Each processor handles your data in accordance with their own privacy policies and applicable law.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data with law enforcement if required by law or to protect the rights and safety of users.

5. Cookies

We use session cookies to keep you logged in. We do not use tracking cookies or third-party advertising cookies. You can disable cookies in your browser, but this will prevent you from logging in.

6. Data Retention

We retain your account data for as long as your account is active. Content you post may persist after account deletion for platform integrity reasons. Audit logs are retained for a minimum of 90 days.

7. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to certain processing of your data

To exercise these rights, contact us. We will respond within 30 days.

8. Security

We implement industry-standard security measures including encrypted data transmission (HTTPS), hashed passwords, and row-level security on our database. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children

CTB is not intended for users under 18 years of age. We do not knowingly collect data from anyone under 18. If we discover we have collected data from a minor, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or a prominent notice on the Platform.