Privacy

• If you only read

  Reading swarms.wiki sets no cookies. The site is hosted on Cloudflare, and we count visits with Cloudflare Web Analytics, which uses no cookies.

  Display settings, such as suggestion filters, stay in your browser.

• If you post a suggestion or comment

  • Cloudflare Turnstile checks that you’re a person.
  • Unless you sign in, your browser gets a cookie, sw_id, so you stay the same anonymous poster for about 13 months. We store only a hash of it, with a random name like “Anonymous Otter”.
  • We store what you post, when you posted it, and a salted, shortened hash of your IP address, which helps us spot spam. We don’t store the address itself. Editors see this hash on each post, so posts made from the same network can look related to them, even anonymous ones.
  • Everyone can see public posts; your first one waits for an editor. Anyone can see all of your public posts together on the Suggestions page. Only you and editors can see private posts.
  • New posts are emailed to editors through Resend.

• If you sign in

  • You can sign in with Google, your email address and a password, a code we email you, or a passkey.
  • Posts you made anonymously stay anonymous. If you posted from that browser before signing in, we ask whether to bring those posts onto your account; they move only if you say so. Signing out starts a new anonymous identity, with a new cookie and name, for anything you post after that.
  • From Google we receive your account ID with them, your name and your email address, and whether they have verified it. We never see your password. Google’s own privacy policy covers signing in with it.
  • With an email address, we store it and a hash of your password, never the password itself. Codes go out through Resend; we keep only a hash of each, and it works for 15 minutes. An address typed in to sign in or ask for a code is kept for at most a day, with the network hash, to limit guessing.
  • With a passkey, we store its public key. The private key never leaves your device.
  • We store the name you choose, which others see next to your posts. Your email address is never shown to anyone.
  • Your browser gets a cookie, sw_session, that keeps you signed in for 90 days. We store only a hash of it.
  • We email you through Resend about replies to your posts and in threads you replied to, and about decisions on your suggestions. You can turn these off in Account settings or from any of the emails.
  • If you make an API key, we store its name, its first characters, when it was made, when it expires and when it was last used, and a hash of the key, never the key itself.

• Why we use it, and who else handles it

  • We use what you post, your cookies and your account to give you what you ask the site for: suggesting, commenting and signing in. We use the network hash, the bot check, the limits and what we keep of blocked accounts in our legitimate interest in keeping out spam and abuse. Under the EU and UK GDPR and Brazil’s LGPD, these are the legal bases of contract and legitimate interests.
  • Service providers handle it for us: Cloudflare hosts the site and its database and runs the bot check and visit counts; Resend sends our emails; Google signs you in if you choose it. They may process it outside your country, including in the United States, under their data protection terms.
  • We don’t sell your data or use it for advertising.
  • How long we keep it: posts stay as a record of the site, and withdrawing one hides it but doesn’t delete it; an account stays until you delete it; cookies, codes and typed-in addresses last as long as the sections above say.

• Who is responsible, and your rights

  swarms.wiki is run by Gutenberg, which is responsible for this data.

  If you have an account, you can delete it from your account page: we erase your email address, your ways to sign in and the network hashes on your posts, and you can choose to remove everything you posted as well. Suggestions editors have accepted stay, since they are part of the site. If editors block an account for abuse, we keep hashes of its ways to sign in and its email address, even after it is deleted, so the same person can’t simply sign up again.

  You can also ask us whether we hold data about you, to see it, correct it, get a copy, have it anonymized or deleted, learn who we share it with, or object to how we use it: write to hello@swarms.wiki, which is also our contact for data protection (under the LGPD, the channel to our data protection officer). If you’re in Brazil, you can also petition the ANPD; in the EU or UK, your data protection authority.