Privacy Policy

Last updated: January 2026

What We Collect

Account Data

  • Email address (required)
  • Username and display name
  • Profile picture (optional)
  • OAuth provider ID (if using social login)

Usage Data

  • Pages visited and actions taken
  • IP address and approximate location
  • Browser type and device information
  • Referrer URL

Content Data

  • Posts, comments, and votes you make
  • Plugins and prompts you submit
  • Reports you file

How We Use Data

  • Provide the service: Display your content, process votes, enable search.
  • Security: Detect spam, prevent abuse, investigate violations.
  • Improvement: Understand usage patterns, fix bugs, develop features.
  • Communication: Send account-related emails (password reset, security alerts).

What We Don't Do

  • Sell your personal data to third parties.
  • Use your content to train AI models.
  • Send marketing emails without consent.
  • Share your email with plugin authors (unless you initiate contact).

Data Sharing

We share data only when necessary:

  • Service providers: Hosting (Fly.io), CDN (Cloudflare), payments (Polar).
  • Legal requirements: When required by law or to protect rights.
  • Public content: Your posts, comments, and profile are public by default.

Cookies

  • Session cookie: Required for login. HttpOnly, Secure.
  • Preference cookie: Stores theme preference. Optional.
  • Cloudflare cookies: Security and performance. Required.

We do not use advertising or tracking cookies.

Data Retention

  • Account data: Retained until account deletion.
  • Content: Retained until you delete it (some may persist in backups).
  • Logs: Retained for 90 days.
  • Backups: Retained for 30 days after deletion.

Your Rights

  • Access: Request a copy of your data.
  • Correction: Update inaccurate information.
  • Deletion: Delete your account and associated data.
  • Export: Download your content in standard formats.

To exercise these rights, email privacy@claudebase.com

Security

  • Passwords hashed with bcrypt (12 rounds).
  • All connections encrypted with TLS 1.2+.
  • Regular security audits and monitoring.
  • Access controls and audit logging for staff.

International Users

Data is processed in the United States. By using claudeBase, you consent to this transfer. We comply with applicable data protection laws including GDPR where required.

Changes

We may update this policy. Material changes will be communicated via email or site notice.

Contact

Questions? Email privacy@claudebase.com