Privacy Policy

Who is responsible

Opinion-Talk is an independent project run by Nicolas Unica, based in Madrid, Spain, who is the controller for the processing described here. The contact point is NicolasUnica@proton.me.

There is no appointed data-protection officer. If that changes, this notice will identify that contact point.

What you give when you sign up

Google confirms who you are and provides the email address and account identifier. Opinion-Talk does not accept or store passwords.

Then a username and location, both public and written as plain text, plus an optional short About me. The service assigns a non-editable generated avatar; it does not accept profile pictures or header photos.

What you create while using it

Your opinions and replies. Your votes, who you follow, who you block, what you bookmark, the reports you send, and your notification settings.

Your profile, opinions, replies and follows are visible to other signed-in users, except where either account has blocked the other. Votes, bookmarks, blocks and reports are visible to nobody but you: no one can see how you voted, what you saved, or that you blocked or reported them.

What the system records on its own

The time each account, opinion, reply and vote was created. A short internal log of write actions per account and a hashed IP-address rate-limit record, used only to stop flooding and abuse; both are deleted automatically as they age.

The hosting, database, identity and email providers may keep ordinary technical logs such as IP address, browser and request time for their own security and operational purposes. Opinion-Talk does not use them for advertising or profiling.

Why any of it is kept

To run your account and show your posts to the people you meant them for, to send the notifications you left switched on, to keep accounts secure, to deal with spam and abuse, to answer you when you write in, and to comply with the law where it requires it.

In data-protection terms: running your account performs the agreement you accepted; security, abuse prevention and answering support are legitimate interests; anything optional rests on consent you can withdraw; a lawful request rests on legal obligation.

No advertising, no tracking

There are no ads, no analytics, no tracking pixels, no fingerprinting and no third-party scripts on this site. Nothing about you is sold, rented or shared for marketing. The only cookies are the ones that keep you signed in, described in the Cookie Policy.

Who else handles the data

Supabase provides the database and authentication. Google provides the sign-in service you choose to use. Cloudflare serves the application and Proton Mail receives messages sent to the support address. These providers receive only what is needed to provide their service; their own notices describe their processing as independent providers.

Data can also be disclosed where the law demands it, or where it is needed to deal with a threat to someone’s safety.

Where the data is

The primary Supabase database is hosted in Central EU (Frankfurt, eu-central-1). Cloudflare, Google and Proton Mail may process the limited data needed for their services in other locations under their own service terms and data-transfer safeguards. Information about the applicable provider safeguards can be requested at the support address.

How long it is kept

Your content stays while your account does. The permanent Delete account control in Settings removes the account, profile, opinions, replies, votes, follows, blocks, reports, bookmarks and notifications. A protected, non-readable identifier of the Gmail mailbox is retained permanently only to prevent that same mailbox from creating another account; this means the account cannot be recreated with that address. Rate-limit records are purged automatically. Provider backups can retain copies for their configured retention period.

Your rights

You can correct or permanently delete your account in Settings. You can ask for access, a copy, correction, deletion, restriction, portability or to object to processing by writing from the account’s email address to NicolasUnica@proton.me. Requests are handled without undue delay and normally within one month. You can complain to the data-protection authority in your EU/EEA country of residence, work or alleged infringement.

Children

The service is intended for people aged 16 or over and is not designed for children. Account creation uses Google sign-in; Opinion-Talk does not currently carry out automated age verification. If we receive a credible report that an account belongs to someone under 16, we will review it and delete the account where appropriate.

How it is protected

Traffic runs over HTTPS. Opinion-Talk does not receive or store your password; Google handles sign-in. Database rules check every read and write against the account making it, so one account cannot reach another’s private rows. A strict content-security policy limits what the page is allowed to load.

No system is beyond failure. If a personal-data breach creates a risk to you, the controller will follow the applicable notification duties and tell affected people where the law requires it.

Changes

If this policy changes, the date at the top changes with it, and anything significant is announced on the site.