Privacy - Branchwork

This is a plain description of how Branchwork, operated by Foxhole Research, Inc., handles your data. It is written to be read, not to be defensible.

What we store

Your email address. It is the whole account. We use it to send sign-in links and nothing else. We do not sell it, rent it, or hand it to advertisers.
Your handle, display name, and anything you put in your profile - bio, location, website. These are public by design.
The code, changes, reviews and notes you create. Anyone who can see the stack can see them.
Your page, if you write one. Public once you publish it.
Sessions, as a random identifier, a creation time, an expiry, and the browser user agent, so you can see and end your own sessions.
Sign-in tokens, hashed, with the requesting address, kept briefly to stop someone flooding your inbox with links.

What we do not store

Passwords. There are none, so there are none to leak.
Payment details. We do not take payments here.
Tracking or advertising cookies. The only cookie is your session, it is HTTP-only, and it exists to keep you signed in.
Analytics profiles of you across other sites. Not our business.

Who else sees it

Our hosting provider runs the servers and the database, and our email provider delivers sign-in links. That is the list. We do not share your data with anyone else unless the law requires it, and if we are ever compelled to hand over data we will tell you unless we are legally prevented from doing so.

How long we keep it

Sessions expire after fourteen days. Sign-in tokens expire after fifteen minutes and are single use. Everything else stays until you delete it or close your account.

Getting it back or getting rid of it

You can delete your account yourself under Settings. You type your handle to confirm, we email you a link, and nothing happens until you click it. Deletion removes your account, your sessions, your page, your profile and your group memberships, and releases any stacks you own. Changes, revisions and reviews on shared work are reassigned to an anonymous account rather than erased, because they are part of the record of work other people did with you. Email [email protected] for a copy of your data, or if you want the anonymized parts handled differently.

Who we are

Children

Branchwork is not intended for children under 13. If you believe a child has created an account, tell us and we will remove it.

Changes to this page

If we change it in a way that matters, we will say so on the changelog rather than quietly editing the date.