Privacy and location
Use the smallest amount of personal data needed to make a dated community record useful.
Public and private records
Public profiles and contributions are visible by design; drafts, private reviews, personal saves, and reports are limited to the account and authorized moderation access. Public-profile controls must not be treated as permission to expose private account fields.
Your location
Nearby may ask the browser for location only after you choose “Locate me.” The interface should send coordinates only for the requested nearby search and should not silently retain a location history. You can always enter a city or map area instead.
Photos
Pending uploads remain private. Public derivatives should strip embedded location and device metadata before publication. Until that processing service is operating, uploaded originals must not be promoted to the public bucket.
Local preview data
When no community service is configured, drafts and trust-form outbox entries stay in browser storage on that device. The interface labels that state and does not claim they were sent.
Requests
Use the contact page for account-access, deletion, or privacy requests while formal self-service controls are being built.