This policy explains what QuestionableMind collects, why we collect it, how long we keep it, and the controls you have. We wrote it to be read, not to be skipped.
1. What we collect
- Account data: email address, password (stored only as a salted hash), username and the profile details you choose to add, display name, bio, avatar.
- Content you post: questions, answers, comments, votes and reactions.
- Technical data: IP address, browser type and device signals, used for security, rate limiting and abuse prevention.
- Usage analytics: aggregate events such as page views, searches and sign-ups, used to understand what is useful. Analytics are never sold.
2. Why we use it
- To operate your account and show your contributions.
- To keep the platform safe: detecting spam, duplicate posts, vote manipulation and abuse.
- To send notifications you have opted into, replies, mentions, accepted answers.
- To improve search, feeds and overall product quality.
3. What we never do
- We never sell your personal data. That is a business-model commitment, not a marketing line.
- We do not expose your email address to other users.
- We do not publish moderation scores or internal risk ratings about you.
- We do not use your private information for advertising profiles.
4. Cookies
We use a small number of cookies and local storage entries strictly to keep you signed in securely (HttpOnly, SameSite), to remember your dark/light theme preference, and to understand aggregate traffic. No third-party advertising trackers run on this site.
5. Retention & deletion
- Account data is kept while your account is active.
- Security logs are retained for up to 12 months, then purged.
- When you delete your account, your profile and personal data are removed; answers you posted may remain in anonymized form so existing discussions don't break.
- Moderation and audit records are kept for legal safety and internal accountability, with access restricted to authorized admins.
6. Your controls
You can view, edit and export your contributions from your dashboard, change notification settings at any time, and request full account deletion. Deletion requests are processed within 30 days. For any privacy request, email [email protected].
7. Security
All traffic runs over HTTPS. Passwords are hashed, sessions are revocable, admin actions are two-factor authenticated and logged, and backups are encrypted. If a breach ever affects you, we will tell you directly and promptly.