Privacy policy

Beyond Opinions is run by BeyondOpinion (India), the “controller” of the personal data described here. Contact: admin@beyondopinions.com.

What we collect

• Account data: your name, email address, username, optional bio and photo, and a salted hash of your password. If you sign in with Google, we receive your name and verified email from Google; we never see your Google password.
• Content you create: opinion pieces, drafts, comments, votes, reactions, poll answers, bookmarks, follows and reports.
• Moderation records: decisions, notes and an audit log of moderator and admin actions, including suspensions.
• Technical data: IP address and email address are used to rate-limit abuse; they are stored only as one-way hashes in short-lived counters. Article view counts are aggregated per day and not linked to you.
• Emails: verification, password-reset and moderation-decision messages we send you.

Anonymous posts

If you publish anonymously, readers see “Anonymous”. Moderators and administrators can still see which account wrote the piece, and we may disclose that where the law requires.

Why we use it, and our legal basis

• To provide your account and publish your content — performance of our contract with you.
• To moderate, keep the site safe, prevent abuse and enforce the guidelines — our legitimate interests.
• To send service emails — performance of our contract. We send no marketing email.
• To meet legal obligations, and where you consent (for example, signing in with Google).

Cookies and local storage

We use one strictly necessary session cookie (plus Google’s sign-in cookies if you use it) and a browser-storage entry that remembers your light or dark theme. We use no advertising or analytics cookies, so there is no consent banner.

Who we share it with

Only service providers acting on our instructions: our hosting provider (Vercel), our database and file-storage provider (Supabase), our email provider, and Google for sign-in. Published pieces and comments are public and may be indexed by search engines. We do not sell personal data.

International transfers

Our providers may process data outside your country, including outside the European Economic Area and India. Where required we rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

Account data and content are kept while your account exists. Rate-limit counters expire within hours. Moderation and audit records are kept as long as needed to enforce our rules and meet legal duties. Backups are overwritten on a rolling basis.

Your rights

Depending on where you live (including under the GDPR and India’s Digital Personal Data Protection Act), you can ask to access, correct, export or delete your data, object to or restrict processing, and withdraw consent. Email admin@beyondopinions.com from your account address and we will respond within 30 days. You may also complain to your data-protection authority.

Children

Beyond Opinions is not for anyone under 16, and we do not knowingly collect their data.

Security and changes

Passwords are hashed, traffic is encrypted, and staff access is role-limited and logged. No system is perfectly secure. We will post changes to this policy here and update the date above.