Privacy notice

What we process

Guests receive a random signed browser token. We store a one-way derived identity—not that raw token—to keep aliases stable within a debate and enforce one-person voting. For accounts, we encrypt email addresses, store a keyed lookup value, and hash passwords using Argon2id.

• Public: pseudonym or debate-specific alias, contributions, reactions, votes, and timestamps.
• Private: encrypted email, security and recovery records, derived anonymous identity, moderation history, and rate-limit signals.
• Technical: trusted proxy address information, user agent, request metadata, security events, and service logs.

Why we use it

We process data to provide the service, verify accounts, prevent abuse and duplicate voting, keep the platform secure, moderate content, answer complaints, and meet legal obligations. We do not sell personal data or use third-party advertising analytics.

Retention

Daily exact-address rate identifiers are kept for up to 7 days; network-prefix risk identifiers for up to 30 days; raw web logs for up to 14 days; resolved reports for up to 180 days; and administrator audit records for up to one year. Active account and contribution records remain while needed to provide the service or handle safety and legal obligations. Backups expire on a controlled schedule.

Sharing and international access

Authorised moderators and infrastructure providers can access only what they need. We may disclose information where legally required or necessary to protect people and the service. Public contributions are visible globally; do not include information you want kept private.

Your choices and rights

Depending on applicable law, you may ask for access, correction, deletion, restriction, objection, or a portable copy of relevant data. Some security, moderation, and legal records may need to be retained. Contact privacy@thunder.me. You may also complain to the UK Information Commissioner’s Office.