This Privacy Policy explains how Peernity (“we”, “us”) collects, uses, and protects your information when you use the Service. We designed the Service to collect the minimum data needed to run it well.
1. Information we collect
Account information
When you sign in with Google, we receive your name, email address, a Google user ID, and your profile picture URL. We do not receive or store your Google password.
Profile information
When you complete onboarding you choose a public @handle, display name, and optionally a short bio and interests. Everything in your profile is visible to other users.
Content
Reviews, replies, votes, follows, and any media you upload. Content you post is public by default.
Technical information
IP address, user-agent string, device type, approximate location (city-level, derived from IP), timestamps, and which pages you visit. We use this for security, abuse prevention, and operating the Service.
2. How we use your information
- Operate the Service — authenticate you, display your profile, serve your feed, store your content.
- Personalize — use your selected interests, follows, and activity to rank content in your feed.
- Safety & integrity — detect fraud, abuse, spam, vote manipulation, and bot activity.
- Communicate — send transactional messages (account changes, security notices, service notifications). Optional product emails are off by default.
- Improve the product — aggregated, de-identified analytics on how features are used.
3. How we share your information
- Publicly — your handle, display name, profile photo, bio, interests, and the content you post are visible to anyone, including search engines and unauthenticated visitors.
- Service providers — cloud hosting, error monitoring, and analytics providers that process data on our behalf under contract.
- Legal — if required by law, subpoena, or to protect the rights, safety, or property of our users, the public, or us.
- Business transfers — in connection with a merger, acquisition, or asset sale, where the acquiring party is bound by this Policy or equivalent terms.
We do not sell your personal information. We do not serve third-party advertising based on your activity on the Service.
4. Cookies and similar technologies
We use an HttpOnly session cookie (peernity_refresh) to keep you signed in securely. We may also use first-party storage for preferences. On our production website we use Google Analytics to understand which pages and links people use and how many visits turn into accounts and reviews. It sets Google Analytics cookies in your browser, and our server also reports confirmed sign-ups and reviews to it. We never send your name, email, profile handle, review text or uploaded photos to Google Analytics, and we do not enable its advertising features.
Only on our ad landing pages — /creators and the pages under it, where our ads lead — we also use the Meta Pixel and the Reddit Pixel, so we can tell which of our ads bring people who sign up. Each tells its company that the page was visited and, if you sign up from it, that a sign-up happened. They set Meta and Reddit cookies in your browser, and each company may link those events to your account with them under its own policy: Meta's privacy policy and Reddit's privacy policy. We do not send Meta or Reddit your name, email, handle or anything you write, and neither pixel is used anywhere else on the Service.
You can turn analytics off at any time using “Analytics preferences” (in Settings, and at the bottom of this page); your choice is kept for a year in this browser and stops future collection — Google Analytics, including pending server reports, and the Meta and Reddit Pixels. Turning it off does not affect your access to the Service, and our account and review records remain separate from analytics. Learn more about Google's privacy practices.
5. Security
We protect your account with modern security practices: encrypted transport (TLS), short-lived access tokens, revocable refresh tokens, secret rotation, rate limiting, and least-privilege database roles. No system is perfectly secure, but we take reasonable steps to reduce risk.
6. Data retention
We keep account and content data while your account is active. If you delete your account, we remove your profile and public content within 30 days, except where we’re required to retain specific records for legal, security, or fraud-prevention reasons.
7. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate information.
- Delete your account and associated content.
- Export a copy of your data.
- Object to, or restrict, certain processing.
To exercise any of these rights, contact privacy@thepeernity.app. We’ll respond within the timeframe required by applicable law.
8. Children
The Service is not directed at children under 13 (or the minimum age of digital consent in your country). We do not knowingly collect personal information from such children. If you believe a child has provided us information, contact us and we will delete it.
9. International transfers
Our infrastructure may process your data in countries other than the one you live in. Where required, we rely on appropriate legal safeguards (such as standard contractual clauses) to protect your information during transfer.
10. Changes to this Policy
We’ll update this Policy as the Service and applicable law evolve. When changes are material, we’ll notify you in-app or by email before they take effect.