Privacy Policy

Last updated: August 2026

What we collect

• Account data: email address, display name, a hashed password (or your Google account identifier if you sign in with Google), and an over/under-13 flag from the signup date-of-birth check. The birthdate itself is never stored.
• Content you post: images, titles, descriptions, comments.
• Operational data: IP address and user agent for abuse prevention and rate limiting, and moderation verdicts for content you upload.

What we don't do

• No advertising, no selling of data, no tracking cookies.
• Analytics are cookieless and aggregate (Cloudflare Web Analytics). The only cookie is the first-party session cookie that keeps you signed in.

Who processes data on our behalf

Cloudflare (hosting, storage, delivery), AWS Rekognition (automated image safety scanning), and Sentry (error monitoring). Images you upload are sent to the scanning service solely to check them against our content policy.

Retention and deletion

Content stays until you delete it or it is removed by moderation. Removed originals are kept for a limited audit period, then deleted, except where the law requires preservation. You can delete your account and all its data yourself at any time from Settings → Account. To export your data, email privacy@blix.town — this also is the contact for parents or guardians with questions about a minor's account.

Your rights

Depending on where you live (including under the LGPD and GDPR) you may have rights to access, correct, export, or erase your personal data. Write to privacy@blix.town and we will honor them.