Privacy Policy
Deployment draft: complete the bracketed details and review this policy against your actual service before publishing it.
- Service: Podmod
- Operator: [Operator legal name]
- Address: [Operator address and country]
- Contact: [Privacy and support email]
- Effective date: [Effective date]
Information we collect
When you create an account, we collect your name and username. We store a password hash rather than your plain-text password. We do not ask you to verify an email address.
We store the content you submit, such as notes, and information needed to operate your account. Sessions may include sign-in dates, expiry dates, IP addresses, and browser or device information. Security controls also keep information needed to limit repeated sign-in requests.
Operational logs record information such as request identifiers, response status, and processing time. If error monitoring is enabled, error reports can include exception types and code locations. The default reporting configuration removes request bodies, cookies, account details, and raw error messages from reports. This does not remove the connection information that hosting or monitoring providers may process when receiving network requests.
How we use information
We use this information to create and maintain accounts, authenticate users, store user content, prevent abuse, investigate faults, and respond to support requests.
Before deployment, the operator must specify the applicable legal grounds for these activities and any additional uses of personal information. This draft does not assume a particular jurisdiction or legal basis.
Cookies and local storage
The service uses authentication cookies to keep you signed in. Browser storage may also remember interface preferences, such as your theme. These are separate from your password.
Any analytics, advertising, additional cookies, or tracking introduced by the operator must be described here before use, together with any choices or consent controls required for the deployment.
Service providers and disclosures
Hosting and database providers process information needed to run the service. If enabled, the configured error-monitoring provider receives filtered diagnostic reports.
The operator must identify the providers actually used and their processing locations:
[Hosting, database, and enabled monitoring providers and countries]
Information may also be disclosed when required by applicable law or when necessary to address fraud, security incidents, or threats to the rights of users or others. The operator must review these disclosures for its jurisdiction.
Retention and deletion
The retention schedule for this deployment is:
[Account, content, session, log, and backup retention periods]
The schedule should explain what happens to account content, sessions, verification records, logs, and backups when an account is closed. Removing active records may not immediately remove copies in retained backups. A verification code becoming invalid does not by itself mean its stored record has been deleted.
International processing
[International data transfers and applicable safeguards, or confirm none]
Your choices and requests
You can edit your name, change your password, and sign out other sessions in account settings. Contact [Privacy and support email] to request help with access, correction, account closure, or deletion that is not available in the interface.
Depending on the laws that apply to you, you may have additional rights, including portability, restriction, objection, withdrawal of consent, or a complaint to a competent authority. The operator must document the applicable rights, request process, and response deadlines before publication. We may need to verify your identity before responding to a request.
Security
The service uses measures such as password hashing, authenticated access, and access controls. No system can guarantee absolute security. Deployment security, access to backups, and service-provider configuration remain the operator's responsibility.
Changes and contact
Material changes to how information is handled should be reflected in this policy and communicated as required by applicable law. The effective date above identifies the current version.
For privacy questions, contact [Privacy and support email].