This Privacy Policy explains how hazeldew ("we," "us") collects, uses, stores, shares, and protects information when you use our sports discussion platform, including accounts, profiles, posts, comments, rooms, votes, saved items, reports, media uploads, and related features (the "Service"). It applies alongside our Terms of Service.
1. Information we collect
Account information. When you sign up, sign in, or manage your account, Clerk processes authentication data such as your email address, account identifiers, session tokens, verification status, authentication method, and security metadata. We receive and store the information needed to connect your Clerk account to your hazeldew user record.
Profile information. You may provide a username, bio, avatar, and other profile details. Some profile information is public and may be shown with your posts, comments, rooms, and public profile page.
Content and activity. We collect posts, comments, room memberships, votes, saved posts, reports, moderation-related activity, timestamps, and other interactions you make in the Service so hazeldew can display, rank, moderate, and operate community features.
Media uploads. Images, videos, avatars, filenames, storage keys, upload metadata, and derived media URLs may be stored in Cloudflare R2 or equivalent object storage and served through our application or CDN.
Technical data. We and our service providers may collect logs such as IP address, browser type, device information, operating system, referring pages, request URLs, timestamps, error data, security events, and approximate location inferred from IP address for security, debugging, analytics, and reliability.
Communications. If you contact us, report content, request support, or respond to notices, we may collect your message, contact information, attachments, and related context needed to respond.
2. How we use information
We use collected information to:
- Provide, maintain, and secure the Service
- Authenticate you and personalize your experience
- Display profiles, posts, comments, media, votes, saved items, rooms, and public pages
- Process uploads, generate media URLs, and enforce file restrictions
- Enforce our Terms and protect users from abuse
- Review reports, investigate suspicious activity, and support moderation
- Prevent spam, fraud, scraping, unauthorized access, and other misuse
- Improve performance, debug errors, test features, and understand product usage
- Communicate with you about support, security, policy, or service updates
- Comply with legal obligations and enforce our rights
We do not sell your personal information. We also do not use sensitive personal information to infer characteristics unrelated to operating or protecting the Service.
3. How we share information
Public content. Posts, comments, usernames, avatars, profile fields, room activity, and other public interactions may be visible to other users, visitors, search engines, or anyone who can access the relevant page. Information you make public may be copied, saved, or shared by others.
Service providers. We use vendors that process information on our behalf, including Clerk for authentication, hosting and database providers, Cloudflare or similar providers for media storage and CDN, and infrastructure, analytics, logging, email, security, and monitoring providers. They may process data only as needed to provide services to us and subject to their own terms and policies.
Moderation and safety. We may share relevant information with moderators, operators, service providers, or authorities when needed to investigate abuse, enforce rules, protect users, respond to security issues, or comply with law.
Business changes. If hazeldew is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction subject to this Policy.
Legal requirements. We may disclose information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect rights, safety, property, users, or the integrity of the Service.
4. Cookies and local storage
Clerk and our frontend may use cookies, local storage, session storage, and similar technologies for authentication, session refresh, security, anti-abuse, preferences such as theme, product state, and remembering whether certain setup steps have been completed.
You can control cookies through your browser settings. Some features, including sign-in, account persistence, uploads, and protected pages, may not work correctly if cookies or browser storage are disabled.
5. Legal bases for processing
Where required by law, our legal bases may include performing our contract with you, pursuing legitimate interests such as operating and securing hazeldew, complying with legal obligations, protecting vital interests in safety situations, and relying on consent where the product specifically asks for it.
6. Data retention
We retain account and content data while your account is active and as needed to operate the Service. We may retain logs, moderation records, security records, backups, and administrative records for longer where needed for safety, legal compliance, dispute resolution, fraud prevention, debugging, or enforcing our Terms.
If you delete content or close your account, we will delete or anonymize personal data within a reasonable period unless retention is needed for legal, security, integrity, backup, or operational reasons. Public content copied or shared by others may remain outside our control.
7. Security
We use industry-standard measures such as HTTPS, access controls, and hosted infrastructure. We may also use authentication controls, signed media URLs, logging, monitoring, rate limits, and moderation tools to protect users and the Service.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you are responsible for keeping your login credentials, devices, browser, and email account secure.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or export personal data, restrict or object to certain processing, withdraw consent, or appeal certain decisions. You can update profile information in the app and manage authentication settings through Clerk on your account page.
Contact us to exercise rights that are not available in-product. We may need to verify your identity before responding. Some requests may be limited by legal, safety, security, fraud-prevention, or operational requirements.
If you are in the European Economic Area or UK, you may lodge a complaint with your local data protection authority. If you are in California or another jurisdiction with specific privacy rights, you may have additional rights under applicable law.
9. Children
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13, or under the minimum age required in their country. If you believe a child has provided us data, contact us so we can review and delete it where required.
10. International transfers
Your information may be processed in countries other than where you live, including where our service providers operate. Those countries may have different data protection laws. We take steps designed to protect data in line with this Policy and applicable requirements.
11. Third-party links and browser extensions
hazeldew may include links to third-party websites, services, or content, and your browser may run extensions such as password managers or wallet extensions. We do not control those third parties and are not responsible for their privacy or security practices. Review their policies before sharing information with them.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated through the Service where appropriate.
13. Contact
Privacy questions can be directed to support@hazeldew.com.
This document is provided for transparency during the MVP phase and is not legal advice. Consult qualified counsel for GDPR, CCPA, or other compliance obligations in your jurisdiction.