Do Not Sell or Share My Personal Information

How to submit a request

Email [email protected] with the subject line CCPA Request and include the following in the body so we can verify your identity before acting (Cal. Civ. Code §1798.130(a)(7) verifiable-consumer-request rule):

Subject: CCPA Request

1. Which right are you exercising? (pick one)
   [ ] Right to know / access  (§1798.110)
   [ ] Right to delete         (§1798.105)
   [ ] Right to correct        (§1798.106)
   [ ] Right to limit use of sensitive PI (§1798.121)
   [ ] Right to opt out of sale / sharing (confirmation in writing)

2. Account identifier (one of, so we can verify):
   - Username: ___________________________
   - Email registered to the account: ____________________

3. California residency attestation:
   "I attest under penalty of perjury that I am a resident of California."

4. (If you are an authorised agent acting on a consumer's behalf)
   Proof of authorisation (signed power of attorney or written
   permission from the consumer) attached.

5. (Optional) Anything else relevant to your request.

We respond within 45 days as required by §1798.130(a)(2). Complex requests may take an additional 45 days; we'll tell you in writing if that applies. No fee is charged for the first two requests in any 12-month period.

Categories of personal information collected

Required disclosure under §1798.110(c). Each item links to the field in our retention policy that documents storage location and retention window.

• Identifiers — username, email, hashed password
• Network activity — IP addresses, user-agent strings, request logs
• Geolocation (coarse) — derived from IP for abuse / rate-limit purposes; not stored beyond log retention
• Inferences — none. We do not build behavioural profiles.
• Sensitive PI — none collected.

Full per-field detail in the public retention policy.

Sale / sharing of personal information

Required disclosure under §1798.115(c) and §1798.140(ah):

• Personal information sold in the preceding 12 months: None.
• Personal information shared for cross-context behavioural advertising in the preceding 12 months: None.
• Personal information disclosed for a business purpose in the preceding 12 months: As listed in the DPA register (Cloudflare for storage and CDN; HuggingFace as a read-only model source which does not receive user data).

Non-discrimination

Required disclosure under §1798.125: we will not deny you the service, charge you a different price, or provide a different level of service because you exercised any of these rights. There is no financial incentive program tied to consent.