Privacy Policy

Last updated: October 17, 2025

We respect your privacy and collect only the data necessary to operate the Q&A Platform in compliance with the GDPR.

What We Collect

• Questions you submit (text + timestamp)
• Email address from SSO authentication (via Cloudflare Access)
• Anonymized vote identifiers (hashed email addresses) to prevent duplicate votes
• Basic technical data used briefly for security

Note: Your email address is hashed using SHA-256 before being stored for vote tracking. The hash cannot be reversed to identify you. We store your email address to track which questions you submitted.

Why We Collect It

Data is processed under GDPR Article 6(1)(f) for:

• Preventing vote fraud and spam
• Operating and securing the platform

How Long We Keep Data

• Questions: kept until removed or reported
• Votes: anonymized data automatically deleted after 90 days
• Reports: deleted after moderation (usually within 30 days)

Who Processes Data

Our service runs on Cloudflare infrastructure (hosting, security, and storage), all GDPR-compliant.

Your Rights

• Access, erasure, and objection rights under GDPR
• You can stop using the platform anytime — no personal data is stored

Security

• HTTPS encryption
• Rate limiting and bot protection
• SQL injection and XSS protection

Cookies

No tracking cookies. Only essential Cloudflare cookies for security and DDoS protection.

Updates

We may update this policy. The latest version is always available on this page.