Privacy Policy
What we collect, how we use it, and what rights you have. No jargon.
Data controller: Your personal data is controlled by Reacht, LLC, a limited liability company organized in the State of Georgia, United States (organized June 21, 2026). Contact us at privacy@reacht.app.
What we collect
We collect only what's necessary to run the platform.
Email address — required for your account and to send transactional emails (confirmation, password reset).
Username and display name — public, visible to other members.
Content you create — posts, comments, votes, and messages.
Profile information — avatar and bio you choose to provide. All optional.
Standard server logs — IP address, browser type, pages visited. These are retained for security and debugging purposes and not used for profiling.
How we use it
To operate your account and run the platform.
To send transactional emails: account confirmation, password resets, and important account notices.
To send the weekly digest email — only if you haven't unsubscribed. You can turn this off anytime in settings or by clicking the unsubscribe link in any digest email.
To enforce The Code and the Content Policy.
We never sell your data. We never use your data for advertising. We never use your content to train AI models.
Who we share it with
We share data with exactly three processors, all of whom handle data on our behalf under contractual data protection obligations:
Supabase — database and authentication. Data is stored in the US.
Resend — email delivery. Processes email addresses only.
Vercel — hosting and edge infrastructure.
Law enforcement — only where required by applicable law, such as a valid court order or legal process. We are required to report child sexual abuse material (CSAM) to NCMEC under 18 U.S.C. § 2258A.
No one else. Ever.
Data retention
Your data is kept while your account is active.
If you delete your account, your personal data (email, username, profile, messages) is deleted within 30 days.
Some records may be retained longer where required by law — for example, CSAM reports are retained per NCMEC requirements, and certain moderation log entries may be retained for legal compliance purposes.
Posts and comments you've made will remain on the site after account deletion, with your name replaced by [deleted]. Your personal identity is stripped from the content; the posts themselves are retained to preserve conversation continuity for other members.
Your rights
You have the following rights regarding your personal data:
Access — request a copy of the personal data we hold about you.
Correction — update your profile, username, or email at any time in settings.
Deletion — request that your account and personal data be deleted.
Unsubscribe — opt out of digest emails at any time in settings or via the unsubscribe link in any email.
Portability (GDPR) — request a machine-readable copy of your data.
Object to processing (GDPR) — you can object to processing where we rely on legitimate interests. In practice, the only processing we do is operating the platform you signed up for.
Contact privacy@reacht.app for any data rights requests.
Cookies
We use only essential cookies — session tokens required for authentication. No advertising cookies. No analytics cookies. No third-party tracking of any kind.
If you sign out, your session cookie is cleared immediately.
Children
Reacht is not intended for anyone under the age of 18. If we become aware that a member is under 18, we will terminate their account and delete their data.
If you believe a member may be under 18, please report them through the normal report flow or contact legal@reacht.app.
Changes
If we make material changes to this policy, we'll notify members via email and post a notice on the site before the changes take effect. The current version is always available at this URL.
Contact privacy@reacht.app with any questions.
Last updated: June 2026