What this account step keeps
This explains the current implementation. It is not the finished platform Privacy Policy or Terms of Service.
- Netlify Identity manages your email, password authentication, confirmation and recovery. Your email is not a public profile field.
- BURNt records an adult affirmation and timestamp linked to your account. We do not request your birth date.
- An HttpOnly, Secure cookie identifies your BURNt session. It expires within one hour. Signing in again or changing your password ends your previous BURNt session. A signed-in password change verifies your current password with Identity and issues a fresh session.
- Saved profile text and normalized photos are private to your signed-in account. Private posts and their edit history remain owner-only and do not enter sample feeds or public search. New text check-ins are shared only when you explicitly choose accepted connections in the composer; current accepted connections can read them in Following. Reported check-ins are hidden while the owner reviews a saved text and username snapshot. The check-in status page shows an author their live reported check-ins and latest decision, without report descriptions or reporter identities; removed text stays hidden. Following also saves one emoji reaction per member per check-in. Readers see counts and their own selection, not who else reacted. Counts exclude members who are no longer connected to the author; reconnecting makes saved reactions count again. Deleting the check-in or a reacting member’s profile removes those reactions. Replies share your username and text with the check-in author and all of that author’s current accepted connections, even if you are not connected with them. Reported replies are held for owner review; reply reports retain the reply and parent check-in snapshots after content deletion. A profile content wipe removes your live replies and replies on your deleted check-ins. Reactions and replies are not yet included in self-service exports. Photos and videos are not shared. You can search the current text of your own saved posts while signed in; older edits stay in private History.
- Account security logs record event names and, for successful sign-in, the account identifier. They do not include passwords, email-link tokens or request bodies. Netlify may retain infrastructure security logs, including IP information.
Verified account registration is active in production. The account page offers separate downloads for profile JSON, private post batches, shared connection check-in batches, and the saved WebP photo. These do not include provider authentication data or infrastructure logs. The check-in download includes currently visible or held text; moderation-removed text and report evidence are excluded. You can delete private posts alone, or confirm a content wipe with your current password to remove your saved profile, photo, private posts, live connection check-ins, and private edit history. Photo storage cleanup retries if unavailable; infrastructure backups may retain data temporarily. A content wipe leaves your email login, adult affirmation, and moderation reports and restrictions in place for safety review. Reports record the reporting and reported account identifiers in hashed form, the reported username at submission, category, and user-provided description. Connection check-in reports also retain a snapshot of the reported text, even after the post or profile is removed. They are restricted to owner review and are not currently part of the self-service export. Restricted accounts may send one private appeal per restriction period. The owner can uphold or lift it. Appeals, review decisions and moderation records survive a profile content wipe and remain outside self-service export. We do not yet have a final moderation retention policy. Self-service Identity account deletion and final platform policies are still pending.