Privacy Policy

Who we are

Commons is run by Target720. For privacy questions or complaints contact the Grievance Officer, Target720 at spnikam1984@gmail.com.

What we collect

• Account details: your email address (to sign you in), and your name and profile photo if you sign in with Google.
• Profile you choose: username, display name, bio, website, photo, and whether you are in class 11, class 12 or a dropper. These are public on your profile and next to your stories.
• What you post: stories, questions, comments, images you upload, applause (reactions), saved stories, who you follow, and reports you make.
• Consent record: when you accepted our terms and which age option you chose (adult, or under 18 with a parent/guardian's agreement).
• Technical data: our hosting and security providers see your IP address and browser details in their logs. We use essential cookies to keep you signed in.

We do not sell your data, show advertising, or track you across other websites. We do not ask for your phone number, address, school or government IDs.

Why we use it

• To run the site: sign you in, show your stories, send you notifications on the site.
• To keep the community safe: rate limits, spam protection, reports and moderation.
• To meet legal duties and to answer your requests.

Children and teenagers

You must be at least 13. If you are under 18 we ask you to confirm that your parent or guardian agrees to you using Commons. We do not use children's data for advertising or behavioural tracking, and we do not allow private messages between members. A parent or guardian can contact us at spnikam1984@gmail.com to ask us to access, correct or delete a child's data. We recommend never posting personal details (phone number, home address, school timetable) in stories or comments.

Who else handles your data

• Supabase — stores accounts, content and uploaded images, and handles sign-in.
• Netlify — hosts the website.
• Google — only if you choose "Continue with Google".
• Cloudflare Turnstile — a human check on sign-in, only if enabled.

These providers may process data on servers outside India.

How long we keep it

We keep your data while your account exists. When you delete your account from Settings, your profile, stories, comments, reactions, follows and uploaded images are deleted (a comment that other people replied to is replaced with "[deleted]" so the conversation still makes sense). Backups may keep copies for a short period (up to about 30 days) before they expire. Reports and moderation logs about content may be kept longer where needed for safety.

Your rights

• See your data: Settings → Download my data gives you a JSON file.
• Correct it: edit your profile and stories any time.
• Delete it: Settings → Delete my account.
• Complain: write to the Grievance Officer, Target720 at spnikam1984@gmail.com. We aim to reply within 7 days and resolve within 30. You may also complain to the data protection authority in India.

Security

Connections use HTTPS. Data is protected with row-level access rules in the database; people can only change their own content. No system is perfectly secure — if we learn of a breach affecting you we will tell you and the authorities as the law requires.

Changes

If we change this policy in an important way we will say so on the site. The date at the top shows the latest version.