LEGAL // PRIVACY
Privacy Policy
This site holds very little about you, and this page lists all of it. There is no data broker relationship to disclose because there is no data to sell.
What we never collect
- Email addresses: member accounts never have an email field — the sign-up form has no place to enter one. The single exception is the operator's own admin account, which may store one notification email address (see the data inventory below).
- Phone numbers: never requested, never stored.
- Real names: your public identity is a self-chosen alias. We do not ask for your legal name.
- IP addresses: the application performs no IP logging.
- Analytics and telemetry: no analytics script, no beacons, no pixels, and no CDN.
- Third-party cookies or trackers: the only cookies are your session and your anonymous accessibility preferences.
LEGAL // DATA INVENTORY
What is stored
Login Handle (username)
A 3–24 character handle of letters, numbers, hyphens, and underscores, used to log in. It identifies your account and nothing else about you.
Public Alias
A display name shown to other members. It can be a first name, a nickname, or a pseudonym, and you can change it anytime from your dashboard.
Password Hash
Your password is hashed with bcrypt at cost factor 12. The plaintext password is never written to disk, logged, or transmitted anywhere except the login request itself.
Recovery Key Hashes
Eight single-use recovery codes are generated at registration. Only their SHA-256 hashes are stored; the plaintext codes are shown exactly once and exist nowhere else.
Listing & Loan Data
Tools, skills, loan requests, and messages you create. A lending library cannot run without these records.
Optional Location
A free-text area label you choose, such as a city or region ("Mexico", "NW Columbia"). It appears with your tools and skills for signed-in members and is masked from guests, the same as your alias. It is never geocoded, never required, and never a street address unless you type one.
Anonymous Accessibility Preferences
Optional JSON (contrast, font size, dyslexia font, spacing) synced to your account so your accessibility settings follow you between devices. It contains no identifying data.
Operator Notification Email (admin account only)
One email address on the administrator account, used exclusively as the destination for operational alert emails (support escalations, new registrations, and change alerts). Every alert body is PGP-encrypted on the server to the operator's own public key before it leaves the machine: the self-hosted Postfix relay hands the message to an outbound smart host (Resend), which can only observe the encrypted body and routing metadata (sender, recipient, subject) — never the content. It is never requested from member accounts, never displayed publicly, and member-facing features never read it.
Infrastructure and retention
The application runs on a self-hosted Fedora CoreOS server inside a rootless Podman container. There is no cloud hosting account, no managed database service, and no third-party log aggregation.
All data lives in a single SQLite database file on the host volume. Deleting your account removes your user record, recovery keys, tools, skills, and messages via cascading deletes. Uploaded images are stored locally in the data volume and served directly by the application. No object-storage service is involved.
Because we collect no contact information, there is nothing to sell, share, or hand over in response to a data request about you. The strongest privacy guarantee that can exist is that the data does not exist.
Questions about this policy? Read the Transparency Report or reach the collective via Matrix Chat.