This website's privacy notice

The data controller is Evgeny Borzenkov, Dnipro, Ukraine. Write to support@bringyourownagent.org about anything on this page: to see your data, correct it, delete it, or ask a question. We answer within 30 days, usually much sooner.

Ideas you send

The title, the text, the display name you choose, your email address, the date, and the moment you agreed to this page. We use them to review your idea and, if it fits, publish it on the Ideas page. The title, the text, the display name, the date, the status and the number of +1 votes are public. Your email address never is. Legal basis: your consent (the box you tick), which you can withdraw at any time.

+1 votes

To count one vote per person, a vote is linked to the confirmed email address of the person who gave it. Votes are not shown to anyone, only the total. Legal basis: our interest in a fair count.

News by email

Your email address and the time you confirmed it with the code. We use it to send you news about BYOA, written and sent by hand, rarely. Every message has a link that unsubscribes you in one click. When you unsubscribe, your email address and unsubscribe token are erased immediately; we keep only a salted cryptographic hash of the address to ensure we never email you again. Legal basis: your consent.

Signing in

You prove that an email address is yours with a 6-digit code, or with Google or GitHub, which tell us the address they have verified (and, for GitHub, your login name, which only matters for recognising the site owner). We store the address and which method you used. We never see a password, and we store nothing else from your Google or GitHub profile.

Security

Codes are stored only as a hash and deleted after 7 days. To stop abuse, your network address is kept with code requests only as a keyed hash that cannot be turned back into the address, also for 7 days. The web server writes ordinary access logs with network addresses, kept for about 14 days. Legal basis: our interest in keeping the site safe.

Two cookies, both needed for what you asked for and set only when you use a form or sign in: one keeps you signed in after you confirmed your email (30 days, or until you close the browser for the site owner), the other protects forms from forgery. There are no analytics, advertising or tracking cookies, and the fonts come from this site, so no other company learns that you visited.

• Hetzner Online GmbH hosts the server in Nuremberg, Germany.
• Amazon Web Services (Simple Email Service, region US West, Oregon) delivers our emails to you. Your address and the message pass through it.
• Cloudflare Turnstile checks that a form is used by a person. Its script loads only when you open a form, and Cloudflare then sees your network address and some browser signals.
• Google or GitHub, only if you choose to sign in with them.

We do not sell data, we do not show advertising, and we do not make automated decisions about you: a person reads every idea.

• A published idea stays until we remove it or you ask us to.
• An idea whose email you did not confirm is deleted after 7 days, with the address.
• Votes stay as long as the idea does.
• A news subscription stays until you unsubscribe. When you unsubscribe, the email and token are erased immediately; the suppression hash is kept to prevent future mailings.
• Database backups are kept for up to 60 days and then replaced.

You may ask to see the data we hold about you, to have it corrected or deleted, to limit or object to its use, and to receive it in a usable form. You may withdraw your consent at any time; that does not affect what was done before. If you ask for deletion, we delete your address, and either delete your ideas or keep them without any link to you, as you prefer. You may also complain to the data protection authority of your country.

To unsubscribe from news, use the link in any of our emails. For everything else write to support@bringyourownagent.org.

The site is not meant for people under 16, and we do not knowingly collect their data.

When what we do changes, this page changes first, and the date at the top moves.