What we track. What we don't.
Plain English. Formal language pending legal review — the bullets below describe what actually happens today.
What we collect: account identity (email, hashed passphrase, optional bio + location), your poll answers, IP + device fingerprint for anti-spam, cross-site state for the credit ledger.
What we don't: no contact upload, no third-party ad pixels, no location tracking beyond what you put in profile.
Where it lives: identity on remotehc.com (our backbone), submissions double-written locally + remotehc, operational alerts only to private Discord + admin email.
Your controls: edit + delete at /account, log out clears server session. Email privacy@genondemand.com for full data export or deletion.
Cookies: one session cookie (gnd_sess) carries your auth token. Same-site lax · secure · httpOnly · 7-day expiry. No analytics. No advertising.