← budds

Privacy Policy

Last updated: 19 August 2026. This notice is for LGPD (Brazil) and GDPR-style transparency. The operator of this instance is the controller of personal data stored on it.

What we collect

• Account: username, display name, password hash, optional email, optional Google/Apple ids, bio, photo.
• Content: clips, notes, events, comments, likes, flags, direct messages, community membership.
• Location: GPS coordinates the browser sends when you allow it, and place names you type. Production does not look up your IP to guess a city unless the operator explicitly enables it.
• Technical: session cookies, optional access/refresh tokens, and standard server logs (IP, user agent) for abuse and uptime.

Why

To run the product you asked for (contract), keep the community safe (legitimate interest / legal obligation), and send password-reset or confirmation email if you give us an address (consent / contract).

Sharing

We do not sell personal data. Processors may include: hosting (VPS/Fly), object storage (R2/S3), transactional email, error tracking (Sentry), and Google/Apple if you use those buttons. Nominatim/OpenStreetMap receives place queries you trigger, not your account.

Retention and rights

We keep data while your account exists. Deleting your account removes your profile, posts, comments, and messages as described in Settings. You may access, correct, or delete personal data, and (in Brazil) exercise LGPD rights including portability and complaint to the ANPD. Use Download my data in Settings for a JSON export. Uploaded photos are scanned and EXIF/GPS metadata is stripped from JPEG and PNG files before storage.

Cookies

The budds cookie is an httpOnly session cookie (SameSite=Lax; Secure on HTTPS). Native clients may use bearer tokens instead.

Children

budds is not directed at children under 16. We do not knowingly collect their data.

Terms · Community guidelines