Docs
Privacy & data
Visitor identity, consent, data retention, export and deletion.
Visitor identity levels
| Level | How | Good for |
|---|---|---|
| Guest | Anonymous identifier held by the widget or portal session | Reading and optional low-friction voting |
| Verified email | 6-digit code sent to the visitor's inbox | Posting, commenting and receiving updates |
| SSO | Short-lived token signed by your server (guide) | Private boards and logged-in products |
Configure the required level for viewing, posting, voting and commenting in Settings → Privacy. Browser-local guest identifiers cannot guarantee one human = one vote; use verified email or SSO when that matters.
What is collected
- Content visitors submit, and a name/email only when they provide or verify one.
- Minimal pseudonymous usage events; raw events are retained for 90 days, then only daily aggregates remain.
- Truncated IP information for abuse prevention, kept for a short period.
Voter and subscriber emails are never displayed publicly.
Consent and notifications
Visitors only receive update emails after verifying their email and following a post or the changelog. Every message includes a signed one-click unsubscribe link. You can add a consent notice shown before visitors submit.
Search indexing
Public portals can be indexed by search engines. Turn indexing off in Settings → Privacy to send noindex and exclude your portal from our sitemap. Private workspaces are never indexed.
Export and deletion
Owners can export workspace data and delete individual visitors (anonymizing their contributions) or the entire workspace from the Danger Zone. Data subject requests from your end users can be handled the same way.