PRE-LAUNCH POLICY · UPDATED AUGUST 12, 2026

Privacy policy

This page describes the data the current Saenalee site is designed to process. Operator contact details, production hosting, retention periods, and regional disclosures must be finalized before public launch.

Information we collect

• Social sign-in data: provider name, provider user ID, display name, nickname, and—when supplied—email address and avatar URL.
• Community activity: comments, replies, timestamps, moderation status, and the account that authored them.
• Admin-only social discovery: public social URLs, short editorial notes, risk flags, and review records. Unconverted signals are designed to expire after 30 days.
• Session and security data: an HTTP-only login cookie and a short-lived OAuth state cookie used to protect the sign-in flow.
• Basic server records: production hosting may create limited request, error, and security logs. The provider and retention period are not yet selected.

How we use information

We use this information to authenticate accounts, display the chosen nickname with comments, operate moderation, protect the service, diagnose errors, and maintain editorial records. Social identities are identified by provider and provider user ID; accounts are not automatically merged only because email addresses match.

Cookies and advertising

The current application uses cookies required for login and OAuth security. Analytics and advertising cookies are not part of the current implementation. Before Google AdSense or another advertising service is enabled, this policy and any required consent controls must be updated to identify the provider, purposes, cookie choices, and applicable regional rights.

Sharing and external services

Google or Facebook processes information when you choose that provider for sign-in under its own terms. Published pages may link to third-party news, tools, and social sites; visiting those sites is governed by their policies. We do not describe personal data as sold in the current product.

Retention and account choices

Account and comment records are retained while needed to operate the community and enforce its rules. Comment deletion replaces public text with a deletion marker to preserve discussion structure. A complete self-service account deletion and export flow is not yet available and is required before production launch.

Security and children

Sessions are designed to use signed HTTP-only cookies and production-only secure transport. No service can guarantee absolute security. Saenalee is not currently designed as a service directed to children, and an age policy must be selected before public account registration.

Contact and changes

A monitored privacy contact email and the legal operator name/address must be added before launch. Material policy changes will receive a new effective date. Questions can be raised through the future contact channel.

See also the Terms of use and Community guidelines.