Privacy Policy
Effective June 5, 2026
1. Who we are
deb8, Inc. ("deb8", "we") operates the deb8 discussion platform. This policy explains what we collect, why, and your choices. Questions: privacy@deb8.io.
2. Information we collect
- Account information. When you sign in with an identity provider (e.g. Google or Facebook), we receive your name, email address, and profile image from that provider. You may add a handle, bio, and avatar.
- Content you create. Posts, replies, topics, proposals, votes, reactions, flags, and any links or sources you submit. Public content is visible to others by design.
- Usage & device data. Standard server logs such as IP address, browser/user-agent, pages viewed, and timestamps, used for security, abuse-prevention, and reliability.
- Cookies & local storage. A session/identity cookie to keep you signed in, and a small browser
localStoragevalue to remember your light/dark theme. See section 7.
We do not intentionally collect special-category data, and we ask you not to post it about others.
3. How we use information
- operate the Service — show your profile and content, run discussions, ranking, and reputation;
- keep the community safe — detect spam, abuse, and unlawful content, and enforce our Guidelines;
- maintain security, debug, and improve the product;
- communicate with you about your account or important changes;
- comply with legal obligations.
4. Automated processing & moderation
Most moderation is community-driven (reputation-weighted flags). In addition, content you submit may be processed by automated safety tools scoped to unlawful or safety-critical categories — for example a content-moderation classifier and, for images, perceptual hash-matching to detect known child sexual abuse material. These tools are used to detect prohibited content, not to evaluate or suppress viewpoints. We also compute a reputation score from your public activity to weight flags and ranking.
5. How we share information
We do not sell your personal information. We share it only:
- Service providers who process data on our behalf under contract — e.g. hosting/infrastructure, our identity providers, and content-safety vendors (such as a moderation API provider and an image-hash-matching service). These providers may process content you submit solely to provide their service.
- For legal & safety reasons — to comply with law, respond to valid legal process, or protect rights and safety. We are legally required to report apparent child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC) and may preserve related data.
- In a business transfer — e.g. a merger or acquisition, subject to this policy.
- Publicly — content you post to public areas is, by nature, public.
6. Third-party data sources
When you create a Subject or ingest a link, we fetch information from third-party sources (e.g. CoinGecko, Wikipedia, The Movie DB, Open Library) and from the URL you provide. These are outbound requests to retrieve public information; we do not send your personal account data to them as part of this. Those services have their own privacy practices.
7. Cookies & local storage
deb8_uid— keeps you signed in (essential).deb8-theme— remembers your light/dark/system preference (stored in your browser, not sent to us).
We use essential cookies to run the Service. We do not use third-party advertising trackers.
8. Data retention
We keep account and content data while your account is active and as needed to operate the Service, resolve disputes, and meet legal obligations. When you delete content or your account, we remove it from the live Service, though residual copies may persist in backups for a limited period, and safety-related records may be retained as required by law.
9. Your rights & choices
Depending on where you live (e.g. under GDPR or CCPA/CPRA), you may have rights to access, correct, delete, port, or object to processing of your personal data, and to withdraw consent. You can edit your profile and delete your content in-product, or contact privacy@deb8.io to make a request. We will not discriminate against you for exercising these rights.
10. Security
We use reasonable technical and organizational measures to protect your data. No system is perfectly secure; please use a strong, unique account at your identity provider.
11. Children
deb8 is not directed to children under 13. We do not knowingly collect personal information from them. If you believe a child has provided us data, contact privacy@deb8.io and we will delete it.
12. International transfers
We may process and store data in countries other than yours. Where required, we use appropriate safeguards for international transfers.
13. Changes
We may update this policy. Material changes will be announced in-product or by email, and the effective date above will be updated.
14. Contact
Privacy questions or requests: privacy@deb8.io.