Privacy Policy

Effective: 2026-08-28

On this page: What we collect · Analytics · Account data · Children's privacy · Your controls · Sharing · Security · Contact

1. What we collect

Account data from OAuth sign-in (Discord, Google): your handle, avatar, and email address. Additional sign-in options may be added later.
Content you post: threads, replies, profile fields.
Standard server logs (IP address, user agent) for security and abuse prevention, retained 90 days.

We never ask for or store a password — see the Terms of Service for how sign-in works.

2. Analytics

EMBRIT does not currently run analytics. If we add it, our default is cookieless, privacy-preserving measurement (Cloudflare Web Analytics) that doesn't fingerprint you across sites. Anything beyond that — like Google Analytics 4 — requires a founder decision on the record and, where required (EEA/UK), a consent banner before it loads.

3. Account data

Sessions are an opaque identifier in an HttpOnly, Secure cookie — not a token that identifies you if intercepted. Ember-ledger entries and moderator actions are kept in an append-only log for integrity and abuse investigation; that log can't be edited or deleted, including by us.

4. Children's privacy

EMBRIT is not directed at children under 13, and registration requires confirming you're 13 or older. If we learn an account belongs to someone under 13, we anonymise that account and remove its content the same day we find out — see section 5 for what "anonymise" means in practice.

5. Your controls: export & delete

Export and delete are self-serve from your account page — sign in, then choose. No account access? Email hello@embrit.com and we'll do it by hand — no ticket required, same outcome either way.

Here is exactly what account deletion does, because "delete" can hide detail we'd rather you saw:

Removed immediately and unrecoverably: your email address, your linked sign-in identities (Discord, Google), and every active session.
Your choice on posts. Keep them — they stay visible, attributed to a deleted account — or remove them. You choose at the same time you delete. If you remove a post that started a thread, the thread's title stays visible; the post itself does not.
Anonymised, not erased, is what "delete" means for your account record. The append-only logs described in section 3 reference it, so instead of being removed it is stripped of everything identifying and replaced with a blank tombstone. After deletion, nothing in those logs identifies you.
Retained on a schedule: server logs expire after 90 days (section 1).
Deletion can be deferred, never denied. If we're under a legal obligation to keep your account records — such as a statutory preservation duty or a court order — we defer your deletion request until that obligation ends, then complete it in full, including your email and sign-in links. We'll tell you when a deletion is deferred; we won't say which obligation triggered it. Your account page then shows the pending request — dated, with your choice on posts — until it completes, so you never need to ask again. If you change your mind before it completes, email hello@embrit.com and we'll withdraw the request.

Deleting your account doesn't retroactively withdraw the content license described in the Terms of Service for posts that stay visible to other Embriters.

We share data only with the infrastructure that makes the site run — Cloudflare (hosting, database, sessions, media storage), and Discord or Google if you sign in through them. We never sell your data.

7. Security

Sessions use HttpOnly, Secure cookies scoped to embrit.com — never a password, because we don't store one. Moderation and account-deletion actions are logged and cannot be altered after the fact. Access to the underlying database is limited to the people who operate the site.

8. Contact

Privacy questions or requests: hello@embrit.com.