1. Introduction

Welcome to Driftya. Your privacy and security are important to us. This document explains how we collect, use, and protect your information.

2. Data We Collect

We collect only what we need to run the service:

• Your account email and a display name.
• The notes you create (seed + replies), their mood, and timestamps.
• Notification subscription data if you enable push notifications.

We may also store basic operational logs (such as IP address and user agent) for security and troubleshooting.

3. Cookies & Local Storage

We use cookies and local storage to:

• Keep you signed in.
• Remember your theme preference.
• Store consent and notification settings.

4. Analytics

We use Plausible Analytics to understand aggregate usage of the site. It does not use cookies and does not track you across sites. The data includes page URL, referrer, and a shortened IP address. We use this to improve the service.

5. How We Use Your Data

We use your data to:

• Provide core features (create, route, and display notes).
• Operate and secure the service.
• Send notifications if you opt in.

6. Note Visibility

Notes can be public or private. Public notes may be shown to other users, while private notes are limited to participants. Routing is system-driven.

7. Your Choices

You can:

• Deny cookies when prompted (some features may not work).
• Clear local storage from your browser settings at any time.
• Disable notifications from your browser settings.

8. Prohibited Actions

You are not allowed to:

• Harass, abuse, or harm another person using the service.
• Impersonate another user or use another user's credentials.
• Upload harmful, abusive, or illegal content.

9. Data Security

Driftya is hosted in Europe, with infrastructure located in Sweden. We design the system with privacy and restraint as defaults, not afterthoughts.

We apply industry-standard security practices, including encrypted connections (HTTPS), restricted access to production systems, and separation between application services and stored data.

Operational logs are kept minimal and used only for security, abuse prevention, and troubleshooting. We do not sell data or build behavioral profiles.

While no internet service can guarantee absolute security, we aim to collect as little data as possible and to handle it with care.

10. Changes to This Policy

We may update this policy from time to time. If changes are made, we will notify users by updating this page.

11. Contact Us

If you have any questions about this policy, you can contact us at:

Email: xzar.creative@gmail.com