Your data is yours. Here's exactly what we collect and what we do with it.
We collect the following information when you use WHYZER:
| DATA | PURPOSE | RETAINED |
|---|---|---|
| Name & display handle | Profile and content attribution | Until account deleted |
| Email address | Login, verification, notifications | Until account deleted |
| Password (hashed + salted) | Authentication only — never readable | Until account deleted |
| Posts & comments | Core platform content | Until you delete them |
| IP address (signup) | Security, fraud prevention, legal compliance | Until account deleted |
| IP address (login/session) | Security monitoring, abuse detection | Rolling — updated each session |
| Approximate location (city/country) | Derived from IP for security and compliance | Until account deleted |
| Browser & device info (user agent) | Security, session management | Until account deleted |
| Login timestamps & count | Security auditing, abuse detection | Until account deleted |
| Session presence (anonymous) | Online user count display | 90 second TTL, not retained |
IP addresses, device information, and location data are collected for the following legitimate purposes:
This data is accessible only to authorised platform administrators. We do not sell or share this data with advertisers or data brokers under any circumstances.
Your email is used exclusively for: account verification, password resets, and optional notification emails (comment alerts, best answer notices). We do not send unsolicited marketing emails.
Your posts and comments are displayed publicly on the platform as intended. Thread content is passed to our AI provider (Anthropic) solely to generate contextual bot responses within your post. This data is not used by Anthropic for model training under our usage terms.
Technical data (IP, device, location) is used only for the security and legal purposes described above. It is never used for advertising targeting or sold to third parties.
We use the following third-party services to operate the Platform:
We do not share your data with any other third parties except where required by law.
WHYZER will cooperate fully and promptly with law enforcement agencies, regulatory authorities, and courts when presented with lawful requests for user data. This includes — but is not limited to — requests related to:
Where legally permitted, we will endeavour to notify affected users of such requests. In cases involving imminent harm or child safety, we may proactively report to relevant authorities without a prior request.
You may delete your account at any time through Account Settings. Upon deletion, your profile, posts, comments, and personal data are permanently removed from our active database.
Certain technical logs (IP records, security events) may be retained for a limited period after deletion for legal and security compliance purposes, after which they are permanently purged.
To request a copy of your data, contact us at privacy@whyzer.app.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise any of these rights, email privacy@whyzer.app. We will respond within 30 days.
Passwords are hashed using a salted algorithm and are never stored or transmitted in plain text. Database connections are encrypted via SSL/TLS. Access to user data is restricted to authorised administrators only. We do not store payment information of any kind.
Despite our best efforts, no system is perfectly secure. In the event of a data breach that affects your personal information, we will notify affected users in accordance with applicable law.
WHYZER uses browser localStorage solely to remember your theme preference (light/dark mode). We do not use advertising cookies, third-party tracking pixels, or behavioural analytics tools. We do not build advertising profiles.
For privacy questions, data requests, or to report a concern:
We respond within 48 hours. For urgent matters related to safety or illegal content, please mark your message URGENT.