Privacy Policy
Last updated: October 2026 · Questions: [email protected]
What we store
When you create an account, we store your email address, handle, display name, and (if you sign up with a password) a salted password hash — never the password itself. If you sign in with Google or GitHub, we store that provider's account identifier and the email it reports, linked to your TynHub account. Your signed-in session is stored in Redis, not Postgres, and expires. Content you post — threads, replies, and their edit history — is stored along with timestamps and, for replies, an edited flag. We store which stands you follow, which threads you've read, and which threads you've starred. If you create or join an org, we store its name, domain, and domain-verification status (a DNS TXT token or an admin-email challenge), plus your membership role. We store moderation records — reports you file or that are filed against your content, and any bans or removals a moderator applies. We store a periodically-updated view count per thread. If you or your org buys a featured listing, house stand, or hall sponsorship, we store the billing record (plan, status, price) and Stripe's customer and subscription identifiers — your card details are entered directly with Stripe and never reach our servers. We store your email notification preferences, including whether you've unsubscribed.
Who processes it
We use a small set of service providers to run TynHub: DigitalOcean (hosting and our Postgres database), Cloudflare (network/DNS), Resend (sending email), Stripe (payment processing), and Google/GitHub (sign-in, if you use it). When EthicalAds is enabled, its ad units may load from ethicalads.io on pages that show a sponsored plate; EthicalAds does not use tracking cookies. We do not sell your data to anyone.
How long we keep it
A removed post or comment is hard-deleted automatically once it has been gone past our retention period (an in-process purge job runs on a schedule); until then it is kept soft-removed so moderation actions can be reviewed or reversed. Account and billing records are kept for as long as your account exists.
Your choices
You can update your profile and notification preferences, including unsubscribing from any notification email with its one-click link, at any time from your account settings. You can ask us to export or delete your account data by emailing [email protected]; we will respond within a reasonable time.
Cookies
TynHub sets exactly two cookies: a session cookie (so you stay signed in) and a CSRF token (so other sites can't submit actions as you). Neither is used for advertising or cross-site tracking.