Privacy Policy

1. Scope

This Privacy Policy explains how Cadet Collective collects, uses, discloses, and retains information when you visit the site, create an account, submit content, or contact us. It should be read with our Terms of Service.

2. Information we collect

Account information

We collect the email address you provide for registration, confirmation, sign-in, password recovery, security, and abuse prevention. Authentication is provided through Supabase. Cadet Collective does not receive your password in readable form.

Public profile and content

We collect your chosen username, optional profile picture and biography, reviews, ratings, discussions, replies, votes, and other content you submit. Your profile picture, username, and published content are public. Do not include real names, work emails, badge or case numbers, patient information, or facts that could identify you or another person.

Moderation and account-safety information

We collect reports, report details, moderation decisions, account restrictions, deletion requests, and limited records needed to enforce our rules and investigate abuse.

Technical information

Our hosting, authentication, and security providers may process IP addresses, device and browser information, request logs, timestamps, authentication events, and essential session cookies. We may maintain limited rate-limit and security records to protect the service.

3. How we use information

• Provide, authenticate, maintain, and secure the service.
• Publish content under your chosen public username.
• Review submissions and respond to community reports.
• Prevent spam, fraud, retaliation, and security abuse.
• Respond to support, privacy, and legal requests.
• Diagnose failures and improve reliability, accessibility, and user experience.
• Comply with applicable law and protect people from harm.

4. When information is disclosed

We may disclose information in these limited circumstances:

• Service providers: Vendors that provide hosting, authentication, databases, email delivery, security, and related infrastructure, including Vercel and Supabase.
• Legal and safety reasons: When reasonably necessary to comply with valid legal process, enforce our policies, investigate abuse, or protect the rights and safety of users, responders, Cadet Collective, or the public.
• Business changes: In connection with a merger, financing, acquisition, reorganization, or transfer of the service, subject to appropriate confidentiality protections.
• At your direction: When you ask us to share information or otherwise consent.

We do not sell personal information. We do not currently serve behaviorally targeted advertisements or place advertising trackers. If advertising practices change, this Policy will be updated before those practices begin.

5. Cookies and similar technologies

Cadet Collective uses essential cookies and similar storage required to maintain authentication sessions, prevent abuse, and operate site features. The current service does not use third-party advertising cookies.

6. Retention and deletion

We retain account information and content while your account is active and as needed to provide the service. You can permanently delete your own reviews and can request account deletion from account settings.

Deletion may not immediately remove information from encrypted backups or records that must reasonably remain for security, fraud prevention, legal compliance, dispute resolution, or moderation integrity. Public content associated with a deleted account may be removed, anonymized, or retained where permitted, depending on the request and applicable obligations.

7. Your choices and rights

Account settings allow you to update your username and biography, manage your reviews, and request account deletion. You may also contact us to ask for access, correction, or deletion of personal information. We may need to verify that you control the relevant account before fulfilling a request.

Depending on where you live, applicable law may provide additional privacy rights. We will not discriminate against you for making a valid privacy request.

8. Security and anonymity

We use access controls, Row Level Security, restricted database permissions, and other safeguards intended to protect information. No online service, transmission, or storage system can be guaranteed completely secure.

Uploaded profile pictures are resized, converted to WebP, and saved without the original image metadata. This reduces hidden location and device data but cannot make a recognizable photo anonymous.

A pseudonym does not make a detailed story anonymous. Agencies, coworkers, or others may recognize circumstances you describe. Avoid exact dates, locations, units, schedules, injuries, class details, and unusual events that could identify you.

9. Age restriction

Cadet Collective is intended only for people age 18 or older. We do not knowingly collect personal information from children. If you believe a person under 18 has provided personal information, contact us so we can investigate and remove it where appropriate.

10. United States processing

Cadet Collective and its providers operate in the United States. If you access the service from another location, information may be transferred to and processed in the United States.

11. Policy changes

We may update this Policy as the service and legal requirements change. Material changes will be identified by a revised effective date and, when appropriate, an in-service notice.

12. Contact

Send privacy questions or requests to cadetcollectiveprivacy@outlook.com. Do not include passwords, sensitive operational information, or unnecessary identity documents in your first message.