Privacy

What is stored

• Your email address, so you can sign in and recover your account. It is never shown to another member and never appears in any API response other than your own account record.
• A hash of your password. The password itself is never stored and cannot be recovered by anyone, including us.
• Your profile — handle, display name, and whatever else you choose to fill in. All of it is public by design.
• Your posts, images and critique, which are public.
• Who you follow, and who follows you, both of which are public and listed on profiles. Accounts you block are stored too; that list is visible only to you, and a blocked account is never told.
• Your direct messages. They are stored on our servers and are not end-to-end encrypted. Only the two people in a conversation can read it — there is no moderator view of a thread, and no query in this codebase returns one to anybody else. The exception is a single message that one of you reports: that message, and only that message, can be read by a moderator.
• Job postings you write, which are public once approved, including the email address you give for applications if you choose that option. We never see who applies — applications go straight to you.
• Badges and counters — posts, critiques, marked helpful, and the day your critique streak last advanced. All of it is derived from things you did in public.
• Moderation records — reports you file, and actions moderators take. Reports are visible only to moderators, and the person reported is never told who reported them.

What is not collected

• No advertising or analytics trackers, first or third party.
• No behavioural profiling, and nothing shared with data brokers.
• No location beyond the free-text field you may fill in yourself.

Designer tools

Browser tools process files on your device without uploading them. Advanced image tools send your chosen image to our storage and processing server. These uploads are separate from public posts. Input images and results are deleted after 24 hours; anyone you give a download link to can access it until it expires. Temporary processing copies are removed when the job finishes. Images are not used to train models.

Fictional design briefs are saved to your account. Our local language model may expand the fictional scenario; it does not receive your account details. Account deletion removes saved briefs. We retain an anonymous scenario fingerprint to avoid issuing an identical assignment again.

Design News

The newsletter is optional and separate from your site account. We store the email you submit, your confirmation and subscription status, and delivery records so we can send each issue once and honor unsubscribe requests. Your address is not published or shared with other members. Resend processes the email for delivery, and Cloudflare Turnstile checks the signup form for bots. You must confirm your email before receiving the weekly digest. Unconfirmed signups expire after 30 days.

Every digest has an unsubscribe link that works without signing in. We retain the unsubscribed record to honor your choice. Contact sean@swansonx.com to delete that record. Deleting a site account does not automatically unsubscribe a separate newsletter address.

Cookies

One cookie, holding your sign-in session. It is HTTP-only and same-site, so it cannot be read by scripts and is not sent to other sites. There is no tracking cookie to consent to, because there is no tracking.

Deleting things

You can retract any post or withdraw any critique at any time. Retracted content stops being visible to everyone but you and moderators, which is what keeps threads intact and moderation reversible. To delete your account and its content outright, email sean@swansonx.com and it will be done.

Where it lives

Data is stored with Convex, which hosts the database and the uploaded files. Email, when configured, is sent through a transactional email provider and carries nothing beyond the message itself.