Privacy Policy
AIimpacted is built around pseudonymity: you participate under a made-up username, and we collect as little about the real you as we can get away with. This page says exactly what we hold and why.
What we collect
- Account: your pseudonymous username, your email address, and a hashed password (we never store the password itself). Your email is used only to verify your account and to send password resets. It is never displayed anywhere on the site and never shared with other members.
- Google sign-in (optional): if you use "Continue with Google", Google tells us your email address and an opaque account identifier so we can create or link your account. We do not receive your password, contacts, or anything else from your Google account, and your Gmail address is never shown on the site. If you are signed out and already signed in to Google, post pages and the login and signup pages may show Google's "Continue as ..." prompt. Google draws that prompt itself; we learn nothing about you unless you choose to continue, and you are never signed in without that click.
- Email alerts (optional): if you follow a company, industry or country, we store your email address and what you follow, and use them only to send the daily alert email you asked for - never for anything else, never shared. Nothing is sent until you confirm by clicking a link. Every alert has a link to unfollow or to unsubscribe from all; unsubscribing deletes your address and your follows.
- Content: posts, comments, and votes you make are public and shown under your pseudonym.
- Technical: IP addresses are used for rate-limiting and abuse prevention, and appear in our hosting provider's standard server logs.
Cookies
- sess - keeps you logged in (up to 90 days).
- anoncsrf - protects signed-out visitors' forms from cross-site request forgery.
- gstate - a 10-minute cookie that secures the Google sign-in handshake.
- g_state and g_csrf_token - set by Google's sign-in prompt on the pages that show it: the first remembers if you closed the prompt so it backs off, the second secures the sign-in if you choose to continue.
- Google Analytics - we use Google Analytics 4 on public pages to understand aggregate traffic. It is not loaded on account, login, or admin pages. See Google's privacy policy for how Google processes this data.
What we never do
- We do not sell or rent personal data.
- We do not show your email address, real name, or Google identity to anyone.
- We do not send marketing email. The only email you get from us is transactional: verification and password resets.
Removal and deletion
You can delete your own posts and comments; deleted content shows as [removed] and its text is no longer displayed. To delete your account or request removal of personal data, email hello@aiimpacted.org from your account's address and we will action it within 30 days.
Changes
If this policy changes, we update this page and its effective date. Material changes will be noted on the site.