Privacy
What SourceBoard keeps private and what becomes public when you publish.
Privacy Policy
Last updated: September 17, 2026
This Privacy Policy explains how SourceBoard handles information when people access or use the Service.
SourceBoard is designed around public source-finding and community discussion. Some information is intentionally public when a user chooses to publish it, while account, security, moderation, and other non-public information is handled separately.
1. Scope
This Policy applies to information processed in connection with SourceBoard websites, accounts, profiles, posts, comments, source-resolution features, social features, Store activity, points, achievements, cosmetics, support, reporting, moderation, and related services.
Third-party websites and services linked from SourceBoard are governed by their own privacy practices.
2. Information you provide
Depending on how you use SourceBoard, you may provide:
- account identifiers;
- email address or authentication information;
- username and display name;
- profile biography, avatar, links, and profile preferences;
- posts, comments, replies, media, source links, evidence, and public contributions;
- reports, appeals, copyright notices, security reports, and support requests;
- cosmetic submissions or creator information;
- preferences and privacy choices; and
- other information you choose to submit.
Do not submit confidential or sensitive personal information unless it is necessary and appropriate for the feature you are using.
3. Information generated through use
SourceBoard may process operational information such as:
- account and session activity;
- login and security events;
- timestamps;
- device, browser, and network information;
- IP address and approximate network-derived location;
- pages or features accessed;
- interactions such as comments, reactions, follows, friendship actions, Store activity, or source-resolution events;
- reports and moderation history;
- points, achievements, reputation, and entitlement records; and
- diagnostic, anti-abuse, and reliability information.
This information may be used to operate, secure, troubleshoot, improve, and enforce the Service.
4. Public information
Information may become public when you intentionally publish it through a public feature.
Public information may include, depending on your settings and actions:
- username;
- display name;
- avatar;
- profile biography and public links;
- public posts;
- public comments and replies;
- public reactions or activity;
- Accepted Source and Verified Source information;
- public source links or attribution;
- reputation, achievements, or selected cosmetics;
- public timestamps; and
- other information clearly presented as public before or when you publish it.
Public information may be accessed by people who do not have a SourceBoard account.
It may also be indexed, quoted, cached, archived, linked to, summarized, or processed by search engines, researchers, journalists, automated systems, artificial-intelligence systems, and other third parties.
5. Non-public information
SourceBoard does not intentionally expose through public pages or public structured data:
- account email addresses unless a user deliberately publishes one;
- session credentials;
- private authentication data;
- internal security information;
- private moderation notes;
- confidential reports;
- administrative-only data;
- content restricted by supported privacy controls;
- private or friends-only content to viewers who are not authorized to access it; or
- other information designated as non-public.
6. Why SourceBoard processes information
SourceBoard may process information to:
- create and maintain accounts;
- authenticate users;
- provide posts, comments, profiles, social features, and source-resolution features;
- display content according to selected visibility;
- provide points, reputation, achievements, Store items, and cosmetics;
- detect spam, fraud, manipulation, security threats, and abuse;
- enforce rules and moderation decisions;
- investigate reports and disputes;
- process copyright, privacy, or legal requests;
- provide user support;
- maintain backups, reliability, and service continuity;
- analyze product performance and improve features;
- prevent duplicate or illegitimate rewards;
- protect SourceBoard, its users, and third parties; and
- comply with applicable legal obligations.
7. Authentication providers
SourceBoard may use third-party authentication providers to help users sign in, verify accounts, or recover access.
Those providers may process information under their own terms and privacy policies.
Using an external authentication provider does not mean that SourceBoard receives every piece of information held by that provider.
8. Infrastructure and service providers
SourceBoard may use third-party providers for infrastructure, hosting, traffic delivery, security, storage, authentication, communications, monitoring, content delivery, or other operational functions.
Cloudflare is an example of a provider that may process technical information necessary to deliver, protect, or operate SourceBoard.
Providers process information for their respective roles. Their technical involvement does not make them the publisher or moderator of SourceBoard user content.
9. Cookies and similar technologies
SourceBoard may use cookies, local storage, or similar technologies for purposes such as:
- maintaining authenticated sessions;
- remembering settings;
- protecting accounts;
- preventing abuse;
- preserving user preferences;
- measuring reliability; and
- supporting expected product behavior.
Some features may not function correctly if essential storage mechanisms are blocked.
Where legally required, SourceBoard may provide additional controls or notices for non-essential technologies.
10. Security and abuse prevention
SourceBoard may process security-related information to detect:
- unauthorized account access;
- automated abuse;
- manipulation of points or engagement;
- suspicious source-verification activity;
- malicious links or uploads;
- ban evasion;
- credential abuse;
- denial-of-service activity; and
- other behavior that threatens the Service or its users.
Security data may be retained for a reasonable period when necessary to investigate abuse, preserve evidence, prevent repeated attacks, or protect accounts.
11. Moderation information
Reports, sanctions, appeals, evidence, internal review notes, and source-integrity records may be retained separately from publicly visible content.
SourceBoard may keep limited internal records after public content is removed when necessary for:
- policy enforcement;
- repeat-abuse detection;
- appeals;
- security;
- fraud prevention;
- dispute resolution; or
- legal obligations.
12. Data retention
SourceBoard aims to retain information only for as long as reasonably necessary for the purpose for which it is processed.
Retention periods may differ based on the type of information.
For example:
- active account information may be retained while the account exists;
- public content may remain until deleted or removed;
- deleted content may persist temporarily in backups, caches, audit records, or safety systems;
- security and moderation records may be retained longer when needed to prevent abuse or resolve disputes;
- financial-like point ledger records may be retained to preserve transaction integrity; and
- legal requests may require preservation for a defined period.
13. Data export
Where supported, users may request or generate an export of information associated with their account.
An export may not include:
- other users' private information;
- confidential moderation information;
- security-sensitive information;
- information that would compromise abuse-detection systems;
- data that SourceBoard is legally prohibited from disclosing; or
- information that cannot reasonably be associated with the requesting account.
14. Correction
Users may be able to edit profile information and other account data directly through the Service.
If information cannot be corrected through available controls, users may submit a request through SourceBoard's official support or privacy channels.
15. Deletion and anonymization
SourceBoard may support account deletion or anonymization.
Deletion of an account does not necessarily require immediate deletion of every record where retention is reasonably necessary for:
- security;
- fraud prevention;
- abuse prevention;
- transaction or point-ledger integrity;
- moderation history;
- source-resolution integrity;
- legal compliance;
- dispute handling; or
- preservation of the rights of other users.
Where practical, SourceBoard may anonymize or detach retained records from the deleted account.
Public content may be removed, anonymized, or retained depending on the content type, legal requirements, integrity of discussion, and available product controls.
16. Visibility controls
SourceBoard may provide controls for profile visibility, content visibility, friend requests, blocking, sensitive-content presentation, and related privacy choices.
A privacy setting affects future access through SourceBoard but cannot guarantee deletion of copies already obtained lawfully by third parties while the content was public or accessible to them.
Blocking a user does not necessarily remove content already published publicly.
17. International processing
Because SourceBoard is an internet service and may use globally distributed providers, information may be processed in more than one country.
Where applicable law imposes requirements on international transfers, SourceBoard and its providers may use legally recognized transfer mechanisms or other appropriate safeguards.
18. Automated systems and public content
Public SourceBoard content may be made understandable to crawlers and automated systems through ordinary web pages, metadata, previews, feeds, or structured public information.
Private account data is not intentionally included in that public surface.
See AI & Public Content for more information.
19. Children and minors
SourceBoard is not intended to encourage children to disclose personal information publicly.
Where applicable law requires parental consent, age-based restrictions, or special protections, those requirements may apply.
Users should not publish personal information about minors without an appropriate lawful basis and consideration of their safety and privacy.
20. Disclosure of information
SourceBoard may disclose information:
- at the user's direction;
- to service providers acting for operational purposes;
- when content is intentionally public;
- to investigate abuse, fraud, or security incidents;
- to enforce SourceBoard policies;
- to protect users, SourceBoard, or third parties;
- in connection with a valid legal request; or
- as otherwise permitted or required by applicable law.
SourceBoard does not treat public posting as consent to disclose unrelated private account information.
21. Legal requests
SourceBoard may evaluate requests from courts, regulators, law-enforcement agencies, litigants, or other authorities for legal validity, scope, and applicability.
SourceBoard may reject, narrow, challenge, or require clarification of requests that are overbroad, invalid, improperly served, or inconsistent with applicable law.
Where legally permitted and appropriate, SourceBoard may notify affected users.
22. Security
SourceBoard uses organizational and technical measures intended to protect account and service information.
No internet service can guarantee absolute security.
Users should protect their account credentials and report suspected compromise promptly.
23. Your rights
Depending on applicable law and the circumstances, users may have rights to request:
- access;
- correction;
- deletion;
- restriction;
- objection;
- portability or export;
- withdrawal of consent where processing depends on consent; or
- review of certain decisions.
SourceBoard may need to verify identity before fulfilling a request.
Rights may be subject to lawful exceptions, including protection of other users, security, fraud prevention, legal obligations, and freedom-of-expression considerations.
24. Changes to this Policy
SourceBoard may update this Privacy Policy as the Service evolves.
The updated revision date indicates the current published version.
Material changes may receive additional notice where appropriate.
25. Contact
Privacy questions and requests should be submitted through the official privacy, support, or contact channels published by SourceBoard.