Legal
Privacy Policy
Last updated: [DATE YOU PUBLISH THIS]
This describes what the app actually does with data today, written to be accurate rather than boilerplate — but it's still not a substitute for legal review before you rely on it, particularly around what specific privacy laws (GDPR, CCPA, etc.) require for your users' locations.
What we collect
- Account info — username, email address, and a bcrypt hash of your password (we never store or see your actual password).
- What you post — thoughts, questions, and answers, along with when you posted them.
- Payment info, if you subscribe or advertise — handled entirely by Stripe. We store your Stripe customer ID and subscription status, never your card number.
- Advertiser info, if you book an ad — the name, email, and ad content you submit at /advertise. Booking an ad doesn't require a thoughtnet account.
How we use it
To run the service:
- Every thought you post is sent to OpenAI to generate a numeric representation of its meaning (an "embedding"), which is what powers the network graph on /explore — finding thoughts related to yours. OpenAI processes this text under their own API terms; we don't control what they do with it beyond that processing.
- Payments and subscription billing are processed by Stripe.
- Password-reset links and ad-review notifications are sent by Resend, an email delivery service — your email address is shared with them only to deliver that specific email.
We don't sell your data, and we don't use your thoughts or personal information for advertising targeting.
Cookies
One cookie: a signed, httpOnly session cookie that keeps you logged in. It's not used for tracking or advertising, and there are no third-party analytics or ad trackers on thoughtnet.
What's public
Thoughts, questions, and answers are public by default — that's the point of a network people can explore. Your username, avatar, and post history are visible on your profile page to anyone. Your email address is never shown publicly.
Deleting your data
You can delete any thought, question, or answer you've posted yourself, any time, from its page — this permanently removes it. Deleting your entire account isn't self-service yet; email [YOUR CONTACT EMAIL] to request it and we'll remove your account and its content.
Children
thoughtnet isn't intended for anyone under 13.
Changes
We'll update the date at the top of this page if this policy changes in a way that matters.
Contact
Questions about this policy, or to request your data be deleted: [YOUR CONTACT EMAIL]