What we collect

Privacy Policy

This describes what DOKKIT collects, why, and who it's shared with.

Who we are

DOKKIT is operated by Eric Romano, Washington, DC. Contact: contact@dokkit.co.

What we collect

Account: email address, chosen username, password (hashed, handled by Supabase).
Content you post (public).
Technical: IP address and a request timestamp, used transiently for abuse rate-limiting via Upstash Redis.
Analytics: aggregate, non-identifying usage data via Plausible — cookieless, no personal data collected.
Error reports via Sentry — stack traces and a user id, not your email or IP.

Cookies

One essential cookie keeps you signed in. No advertising or cross-site tracking cookies.

How we use it

To run the service, keep you signed in, prevent abuse, fix bugs, and understand aggregate usage. We do not sell your data or show ads.

Processors

Supabase (database, auth), Vercel (hosting), Upstash (rate limiting), Plausible (analytics), Sentry (error monitoring), Resend (transactional email).

Retention

Account data until you delete your account; public content may remain associated with a deleted-user placeholder to keep debates intact.

Your rights

Request access to or deletion of your data by emailing contact@dokkit.co. If you're in the EU, EEA, or UK, you have additional rights under the GDPR, including to restrict or object to our processing of your data and to lodge a complaint with your local data protection authority. If you're a California resident, you have additional rights under the CCPA, including to know what personal information we hold about you and to opt out of its sale — we don't sell personal information to anyone.

Children

Not directed to children under 13.

Changes

Posted here with a new date.