Privacy Policy

Who we are

Omni Post ("we") is a social network operated by [YOUR LEGAL NAME OR COMPANY], based in [COUNTRY]. For anything about your data, write to [YOUR CONTACT EMAIL].

What we collect

Because you gave it to us

• Account: email address and password. The password is hashed by our authentication provider and is never visible to us.
• Profile: display name, username, biography and profile picture.
• Content: posts, comments, images you upload, likes, follows, and direct messages.
• Anonymous questions: when you send someone an anonymous question, your username is not shown to the recipient. It is recorded on our side, so that blocking works and so that abuse can be acted on. See Anonymous questions.

Automatically

• Session data stored in your browser to keep you signed in.
• Technical logs from our hosting and database providers, such as IP address and timestamps, used for security and debugging.
• Advertising cookies, if advertising is enabled. See Advertising.

Anonymous questions

We want to be precise here, because "anonymous" is often used loosely.

When you send an anonymous question, the person receiving it cannot see who you are. Our database is configured so that the sender field is not readable by other users, including the recipient.

However, the sender is stored. We keep it so that a recipient can block someone and actually stop receiving their questions, and so that serious abuse or illegal content can be investigated and reported to authorities where required. As the operator, we can access it.

So: anonymous to other users, not anonymous to us. If that is not acceptable to you, do not use the feature.

What is public

Your username, display name, biography, profile picture, posts, comments, likes and follow lists are visible to other signed-in users. Treat anything you post as public.

Your email address is not visible to other users. Direct messages are visible only to you and the person you are talking to.

Who processes your data

• Supabase — authentication, database and image storage.
• Vercel — application hosting and request logs.
• Google AdSense — advertising, if enabled.
• Google Fonts — typefaces are fetched from Google's CDN when you load the site.

These providers may store data outside your country. We do not sell your personal data.

Advertising

We may show ads from Google AdSense between posts. Google and its partners use cookies to serve and measure ads, and may personalise them based on your activity across sites.

You can control this at Google My Ad Center, and read how Google uses data at policies.google.com.

[IF YOU HAVE USERS IN THE EEA, UK OR SWITZERLAND: Google requires a certified consent management platform before serving personalised ads to them. Describe your consent tool here once it is in place.]

How long we keep it

Content stays until you delete it. Deleting a post removes the post, its likes, its comments and the image file you uploaded with it. Deleting a message removes it for both people in the conversation.

To delete your account and everything attached to it, write to [YOUR CONTACT EMAIL]. Provider backups and technical logs may retain copies for a limited period after that.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, to object to certain processing, and to complain to a data protection authority. To exercise any of these, contact [YOUR CONTACT EMAIL].

Children

Omni Post is not intended for anyone under [MINIMUM AGE, e.g. 13, or 16 in parts of the EEA]. We do not knowingly collect data from children below that age. If you believe a child has an account, contact us and we will remove it.

Changes

If we change this policy in a way that materially affects you, we will say so in the app. The date at the top always reflects the current version.