Privacy Policy

1. Scope

This Privacy Policy applies to all users who access or interact with Threadline through its web interface, including visitors, registered users, and authenticated members.

Threadline is not a commercial service and is operated solely as a demonstration and learning project. However, reasonable care is taken to handle user data responsibly.

2. Information We Collect

2.1 Information You Provide

When you create an account or interact with the platform, we may collect:

• Email address
• Username / display name
• Password (stored only as a secure hash)
• Profile information you choose to provide:
  • Avatar
  • Bio
  • Timezone
  • Preferences (theme, notifications, marketing opt-in)

2.2 Content You Submit

• Threads, replies, and edits you create
• Optional thread background images
• Public profile content

All posted content is visible to other users unless explicitly stated otherwise.

2.3 Authentication Data

• Login timestamps
• Password reset tokens
• Email verification tokens
• OAuth identifiers when using Google Sign-In

3. Third-Party Services

Threadline integrates the following third-party services:

3.1 Google OAuth (Optional)

If you choose to sign in using Google, we receive limited account information from Google, such as:

• Google account ID
• Email address
• Display name

This data is used only for authentication and account creation.

3.2 Google reCAPTCHA v3

reCAPTCHA is used to protect public forms from abuse, including:

• Registration
• Login
• Password reset

reCAPTCHA may collect device and behavioral data as defined by Google’s Privacy Policy.

3.3 Email Delivery Providers

An SMTP provider is used to send transactional emails, including:

• Email verification
• Password reset
• Optional notifications

Email content is not used for marketing unless explicitly enabled by the user.

4. Cookies and Local Storage

Threadline uses limited cookies and browser storage for:

• Session management
• Authentication state
• CSRF protection
• Theme preference (light / dark / auto)

Cookies are functional, not advertising-based.

A dedicated cookie consent interface may be added in the future.

5. How We Use Your Data

We use collected data to:

• Create and manage user accounts
• Authenticate users securely
• Display public profiles and forum content
• Prevent abuse and automated attacks
• Improve application stability and security

We do not sell, rent, or trade personal data.

6. Data Storage and Security

Threadline implements reasonable technical safeguards, including:

• Password hashing
• CSRF protection
• Output escaping and XSS mitigation
• Rate limiting on authentication and posting
• CAPTCHA protection on public forms

Data is stored in a database and accessed only by the application.

No system is guaranteed to be 100% secure. Use the application at your own risk.

7. Data Retention

• Account data is retained until the account is deleted
• Forum content may remain visible even after account deletion, unless manually removed
• Logs and security-related metadata may be retained for operational purposes

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Update or correct your information
• Delete your account
• Withdraw consent for optional data processing

Because Threadline is a portfolio project, requests may be handled manually and on a best-effort basis.

9. Children’s Privacy

Threadline is not intended for children under the age of 13. No intentional data collection from minors is performed.

10. Changes to This Policy

This Privacy Policy may be updated as features evolve. Changes will be reflected on this page with an updated revision date.

11. Contact

For questions related to privacy or data handling, contact the project maintainer via the repository or project website where Threadline is hosted.