Privacy policy

1. What we collect

Account data: email address, username, display name, bio and avatar you choose to provide.

Content data: threads, replies, journals, reviews, votes and reports you create.

Technical data: standard logs (IP address, browser, timestamps) kept short-term for security and abuse prevention.

Moderation data: an internal audit log records enforcement actions taken on your content or account: actor, rule, rationale and outcome: visible to you in Settings and appealable.

Payment data: handled entirely by Stripe. We store only your Stripe customer ID and subscription state: never card numbers.

2. Images and metadata

Images you upload are re-encoded in your browser before reaching our servers. EXIF metadata: GPS coordinates, device identifiers, capture timestamps: is destroyed before upload, not just after.

Journal media lives in private storage and is served through short-lived signed URLs. Nothing in journal-media is publicly addressable.

3. How we use data

To operate the service: authentication, content display, moderation, subscription management.

To keep the service safe: rate limiting, spam detection, abuse investigation.

To communicate: transactional email (confirmations, security notices) via Resend. No marketing email without opt-in.

To triage safety: submitted content text may be classified by the Mistral moderation API. The classifier only flags potential policy concerns for human review: it never removes content or takes action on your account by itself.

We do not sell personal data. We do not run third-party behavioural tracking for profiling.

4. Advertising

If enabled, Google AdSense may serve ads on morphae.org. AdSense may set cookies subject to Google's own policy. Ad slots are labelled; premium pages minimise placements.

Where required (e.g. EEA/UK), a consent mechanism must be enabled before personalised ads are served: see the launch checklist.

5. Sharing

Public content (threads, public journals, reviews) is visible to anyone and indexed by search engines by design.

Private journals and account data are never shared except: with processors that run the service (Supabase, Vercel, Stripe, Resend, Mistral for content classification), when required by law, or to prevent serious harm.

6. Retention

Content persists while your account exists. Deleted posts and threads are soft-deleted (hidden immediately) and purged on a rolling basis.

You may request account deletion; associated personal data is removed and public posts are anonymised.

7. Your rights

Depending on your jurisdiction you may have rights to access, correct, export or delete your personal data. Contact us to exercise them.

Australian Privacy Act 1988 and, where applicable, GDPR-style rights are respected as the operating standard.

8. Security

Data is stored with Supabase (Postgres) behind row-level security. Transport is TLS-encrypted. Administrative access is limited to named staff.

No system is perfectly secure; we commit to prompt disclosure of any breach affecting your data.