Legal
Privacy Policy
Last updated: October 15, 2026. The short version: no ads, no trackers, no passwords; we keep only what the Site needs to work.
What we collect
- Account data — if you sign in with Google: your Google account ID, name, email address and profile picture, as Google provides them. We never see your password. Sign-in itself is handled by Google under Google's privacy policy. Your email is used only to identify your account (and to grant admin rights to the site operator's own account); it is not shown to other users or sent to anyone.
- Your content — posts, comments and votes you make on the board, with the time you made them.
- Server logs — like every web server, ours records the IP address, browser type, requested page and time of each request. Logs are used only to keep the Site running and secure, and are deleted on a rolling basis.
- A session cookie (
fa_session) that keeps you logged in for up to 30 days. It contains a random token, nothing personal. - Browser storage — the prevention checklists you tick, your theme choice and your analytics choice are saved in your own browser's local storage so they're there when you come back. That data never leaves your device.
Analytics, only if you say yes. We use Google Analytics 4 to learn which case studies help people. It runs only after you accept the small notice at the bottom of the page; if you decline, nothing is loaded and no analytics cookie is set. When enabled, Google receives your anonymised IP address, pages viewed, device/browser type and a random visitor identifier, under Google's privacy policy; you can opt out any time with the Google Analytics opt-out add-on or by clearing this site's data. We don't use advertising networks or fingerprinting, and we don't sell or share personal data with anyone.
Third parties
- YouTube — videos are embedded through
youtube-nocookie.com, YouTube's privacy-enhanced mode. When you play a video, Google may still collect data under Google's privacy policy. - Google Fonts — the Site loads two typefaces from Google Fonts; your browser's request for them is subject to Google's privacy policy.
- OpenAI — video transcripts (not your data) are sent to OpenAI to generate the case studies. Nothing about you or your account is included.
How long we keep things
Account data and your content stay until you delete them or ask us to. Deleted comments are blanked and shown as "[deleted]" so replies stay in context; the text is removed. Server logs are kept for a short period and then discarded.
Your rights
You can see and delete your own posts and comments from the Site. To delete your account entirely, or to ask what data we hold about you, email us and we'll handle it promptly. Depending on where you live you may have further rights (for example under the GDPR or CCPA); write to us and we'll honour them.
Children
The Site is not intended for anyone under 18, and we don't knowingly collect data from them.
Changes
If this policy changes, the date at the top will change. Significant changes will be announced on the board.