Privacy

What is collected

• Your email address. Required to have an account. Sign-in is by emailed link, so there is no password to store.
• A display name and handle, if you choose to set one.
• What you post — suggestions, comments, and the companies and requests you follow.
• Your votes. Stored against your account so you cannot vote twice, and never shown to anyone.
• Basic technical logs — errors and request data generated by hosting, used to keep the site working.

There are no advertising trackers, no analytics pixels from ad networks, and no third-party cookies.

What is public

Suggestions and comments are public, along with your display name and handle if you did not post anonymously. Vote counts are public. Status history is public.

What is never public

• Your email address. Not shown to anyone, including companies, and never sold or shared for marketing.
• How you voted. Vote records are readable only by you. Nobody — not other members, not the company, not a company that has claimed its page — can see who backed a request.
• Who you are on an anonymous post. Anonymous is a display choice and it is permanent for that post. The account behind it is retained so the post can be moderated, but there is no route in the product that reveals it.
• Who reported what. Reports are visible only to moderators.

Who else processes your data

These are the services this site runs on. Each has its own privacy policy.

• Supabase — database, authentication and file storage.
• Vercel — hosting and request logs.
• OpenAI — the text of a suggestion is sent for two automated checks when it is posted: finding duplicates, and screening for the things listed in the guidelines. Your email address and identity are never sent.
• Resend — sending account and notification email.
• Sentry — error reports, when enabled.

How long things are kept

Posts are kept for as long as the site exists — that is the point of a public record, and it is why the choice to post anonymously matters at the time you post.

If you delete your account, your account and email address are deleted. Your posts stay up with the author removed, because deleting them would erase other people's votes and a company's replies along with them. If you want a specific post taken down, ask.

Your rights

You can ask for a copy of your data, ask for it to be corrected, or ask for your account to be deleted, by emailing support@suggestion-box.app. Depending on where you live you may have additional rights under the GDPR or the CCPA; those requests go to the same address.

Cookies

One cookie, holding your sign-in session, plus a stored preference for light or dark mode. Nothing for advertising or cross-site tracking.

Children

This site is not intended for anyone under 13, and accounts are not knowingly created for them.

Changes and contact

If this policy changes in a way that affects what is public or who processes your data, the date at the top changes and account holders are told by email. Questions: support@suggestion-box.app.