Privacy Policy

Analytics & usage data

When you accept analytics, we collect usage data to improve the service. This includes:

• IP address (used to infer country/region, then hashed for storage)
• Approximate location (country/region derived from IP)
• Device type (e.g. mobile, tablet, desktop)
• Browser and operating system
• Visit duration and pages viewed
• Your timezone (e.g. America/New_York, detected from your browser)
• A random session identifier stored in your browser's localStorage
• Referral source (the page that linked you here)
• UTM campaign parameters (source, medium, campaign) from marketing links
• Funnel events (e.g. signup started, signup completed, likes)
• Raw browser user-agent string

Server-side activity logging

Independently of your analytics consent, we log certain account-related actions under a legitimate interest basis to maintain platform integrity and prevent abuse. These logs include:

• Login, registration, logout, and password change events
• Creating reviews, comments, and complaints
• Voting and helpful-mark actions
• Following and unfollowing users
• Search queries (query text and result count)

These logs contain your IP address (hashed), country, device type, and browser — but no page browsing history or session duration.

Cookies

We use an analytics_consent_v2 cookie to remember your analytics preference (accept or decline). No analytics tracking runs until you accept. When you sign in, an authentication cookie is sent with API requests to identify your session.

Data storage

Real-time analytics are stored in memory (Redis) with a rolling 32-day window. Events are also written to a permanent database for long-term aggregation. Personal identifiers (IP addresses) are hashed before storage and user associations are automatically removed after 90 days. Aggregated stats are used for product improvement and are not sold to third parties.

Your choices

You can accept or decline analytics when prompted. You can change your choice at any time by clearing your cookies. Server-side activity logging cannot be opted out of as it operates under a legitimate interest basis for platform security.