Privacy Policy
Last updated: April 2026
Information We Collect
When you create an account on Conspirafy, we collect your email address and any profile information you choose to provide (display name, username, bio). When you interact with the site, we collect your votes, comments, and submissions.
How We Use Your Information
- Account management: To create and maintain your account, authenticate your sessions, and display your profile
- Transactional emails: To send you welcome emails, submission status updates, and comment reply notifications (configurable in your account settings)
- Newsletter: If you opt in, to send periodic newsletters about new content on Conspirafy
- Site functionality: To display your votes and comments, and to process your theory submissions
Data Storage
Your data is stored securely in Supabase (PostgreSQL) with Row Level Security policies ensuring that users can only access and modify their own data. Passwords are hashed and never stored in plain text. All connections use TLS encryption.
Third-Party Services
- Supabase: Database hosting and authentication
- Resend: Transactional email delivery
- Netlify: Website hosting and CDN
- Cloudflare: DNS and DDoS protection
Cookies
We use essential cookies for authentication session management. We do not use advertising cookies or third-party tracking cookies.
Your Rights
You have the right to:
- Access your personal data via your account settings
- Update or correct your profile information at any time
- Delete your account by contacting us at hello@conspirafy.com
- Opt out of newsletter emails via your account settings or unsubscribe links
- Request a copy of your data
Data Retention
We retain your data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, though anonymized content (comments, votes) may be retained for site functionality.
International Users (GDPR)
If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
Our legal basis for processing your data is legitimate interest (providing the service) and consent (for newsletter subscriptions and optional features). To exercise any of these rights, contact us at hello@conspirafy.com.
California Users (CCPA)
California residents have the right to know what personal information is collected, request deletion of personal information, and opt out of the sale of personal information. We do not sell your personal information. To exercise your rights, contact us at hello@conspirafy.com.
Contact
For privacy-related inquiries, contact us at hello@conspirafy.com.