Privacy Policy

This Privacy Policy describes what Liberty.win collects, how we use it, and the choices you have. We try to collect as little as possible.

1. Information We Collect

• Account information. Username and a hashed password (Argon2). Email is optional and only collected if you provide it.
• Content you post. Posts, comments, votes, and uploaded media.
• Session data. An encrypted session cookie identifies you after you log in.
• Anonymous identifiers. If you post or vote without an account, we store a one-way SHA-256 hash of your IP address (salted with a server secret) to prevent abuse and vote manipulation. We do not store the raw IP address alongside the content.
• Push subscriptions. If you enable browser notifications, we store the push endpoint your browser provides. You can unsubscribe at any time from the bell icon or your browser settings.
• Server logs. Standard web-server logs (IP address, user agent, URL, status code, timestamp) are retained briefly for security and debugging.

2. How We Use Information

• Operate, maintain, and secure the Service.
• Authenticate accounts and prevent spam, fraud, and abuse.
• Deliver push notifications you have opted into.
• Improve the Service and diagnose problems.
• Comply with legal obligations.

3. Sharing

We do not sell your personal information. We share limited information only in these cases:

• Public content. Posts, comments, votes, and your username are public by design. Content you submit may be reposted by Liberty.win to third-party platforms such as X (Twitter) to promote the Service.
• Service providers. We use third parties for hosting, database, CDN, and push delivery. They process data under agreements that restrict use to operating the Service.
• Legal. We may disclose information if required by law, valid legal process, or to protect rights, safety, and property.

4. Cookies

We use a single encrypted session cookie to keep you logged in. We do not use advertising cookies. Your browser can block or clear cookies, but you will be logged out if you do.

5. Security

Passwords are hashed with Argon2. Traffic is served over HTTPS. No system is perfectly secure; use a unique password and enable your browser's phishing protection.

6. Data Retention

Account and content data are retained while your account is active. If you delete your account or content, it is removed from the live site; backups may retain copies for a limited period before being rotated out.

7. Your Choices

• Delete posts, comments, or your account at any time.
• Disable push notifications in your browser.
• Contact us to request access, correction, or deletion of personal data where applicable law grants those rights (e.g., GDPR, CCPA).

8. Children

Liberty.win is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with such information, contact us and we will delete it.

9. International Users

The Service is operated from the United States. If you access it from elsewhere, you consent to the transfer and processing of your information in the U.S.

10. Changes

We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact

Privacy questions or requests: admin@liberty.win.