Privacy Policy
Effective October 16, 2026 · Version 2026-10-16
This policy describes how Compromised Internals handles information when you browse the site, create an account, join discussions, send messages, or place orders.
1. Information we collect
- Account: first and last name, public username, email, password hash, date of birth for eligibility, email verification status, and policy acceptance version and time.
- Profile and contributions: optional display name, avatar, profile details, posts, replies, comments, following choices, and other submissions. Content you designate public can be seen and shared by others.
- Messaging: message requests, conversation content, participants, delivery/read information, blocks, reporting records, and settings.
- Moderation: reports, warnings, administrative notices, restrictions, appeals or inquiries, and related audit records.
- Technical and service data: session information, IP addresses and security logs, browser/device information, cookies, reCAPTCHA signals, and site analytics or consent choices where enabled.
- Commerce: order, shipping, product, and fulfillment details if you purchase merchandise. Payments are handled by payment providers; do not enter card data in community messages.
2. How data is used
We use information to create and secure accounts, confirm eligibility, display chosen public identity, enable site features, deliver notifications, respond to requests, handle purchases, detect spam and abuse, investigate reports, enforce our rules, and maintain reliable operation. Date of birth, first name, and last name submitted at registration are not displayed publicly by default. The separate optional profile birthday field has its own visibility controls.
3. Message privacy and staff review
Messages are restricted to their conversation participants through site access controls; they are not end-to-end encrypted. When a participant reports a message and chooses to supply context, authorized moderators may view that submitted context. Administrative access and access logs are governed by applicable permissions. We may also preserve or disclose information when reasonably necessary to investigate security incidents, comply with legal requirements, or protect people from credible harm. Do not treat private messaging as a secure vault.
4. Disclosures and third parties
We share information with service providers only as needed to operate the site. These may include our infrastructure and email providers, security and CAPTCHA services, analytics and cookie-consent providers, and — for purchases — payment and merchandise fulfillment vendors such as Stripe and Printful. These providers have their own practices. We do not offer a public directory of real names, dates of birth, or email addresses.
5. Cookies and tracking
We use essential session/security cookies and may use analytics or other optional technologies according to consent choices and site configuration. Consult the on-site cookie preference tools for available controls. Disabling essential cookies can affect login and account functionality.
6. Retention and deletion
We keep account, moderation, message, and transaction records for as long as reasonably needed for their purposes, security, disputes, applicable legal obligations, and backup cycles. Content published or quoted by others may persist even if an account is deleted. You can request access, correction, or deletion of applicable data through Contact. Some data may be retained where legally required or necessary to prevent abuse. We do not promise immediate removal from all backups.
7. Security
We use account access controls, encrypted transport where configured, password hashing, rate limits, anti-abuse controls, and role-based administration. No online service can guarantee perfect security.
8. Age and children
Account membership is for adults 18 and older. We use the submitted date of birth to screen registration and do not intentionally register minors. If you believe a minor has created an account, contact us so we can investigate and take appropriate action.
9. Updates and questions
When this policy changes materially, we will publish an updated version and, where appropriate, ask account holders to acknowledge it. Questions and privacy requests can be submitted through our Contact page.