Privacy Policy
What we collect
Your email, handle, display name, bio, and password (stored only as a salted hash), or, if you sign in with Google, the account identifier and email Google shares with us. What you do on OreBoard: digs, contributions, votes, strikes, field reports, comments, features, and reports. Payment records: the amounts and dates of your top-ups and payouts (your card and bank details stay with Stripe). For security: the IP address and browser of each signed-in session.
What’s public
Your handle, name, bio, the digs you post and back, how much you’ve contributed (per dig, and in total on your profile), your strikes, field-report notes, comments, and digs you’ve featured. Private: your email, wallet and earnings balances, your statement, and how you voted. Votes are sealed; only the totals are ever shown.
How we use it
To run the service, keep money accurate, prevent fraud and abuse, and notify you about things you’re part of. Text you post (digs, strikes, comments, reports) may be checked by an automated system, including an AI model from Anthropic, to catch spam, scams and rule-breaking; Anthropic doesn’t use it to train its models. We don’t sell personal data, and we don’t show ads.
Your controls
Download everything we hold about you from Settings. You can correct your details in Settings, or ask us to. Delete your account from Settings: your personal details are erased, while anonymized financial records are kept because other people’s money depends on them being correct.
Who else handles it
Stripe processes card payments and payouts, and verifies the identity of builders who get paid; we never see your card number or bank details. Railway hosts the site and its database. Cloudflare runs our domain and stores strike screenshots. Resend delivers our emails. Anthropic runs the automated checks. Google, if you sign in with it. These providers may store and process data outside Canada, including in the United States.
Cookies
One essential cookie keeps you signed in; a short-lived one protects a Google sign-in while it’s in progress; and one remembers your time zone for the visit so dates show correctly. All three are needed for the site to work, so there’s nothing to accept or decline. Your browser also keeps small preferences, like whether sounds are on. No advertising or tracking cookies.
How long we keep it
Account details stay while your account exists and are erased when you delete it. Financial records are kept for at least six years, as Canadian tax law requires. Security logs are kept only as long as they’re useful for protecting accounts.
Contact
Questions, requests to see or correct your information, or privacy complaints: [email protected]. Valyra Inc. handles your information under Canada’s privacy law (PIPEDA).
See also: The Charter · Terms · Privacy · Content policy