This Privacy Policy describes how Shungite Forum (\"we\", \"us\", \"the site\") handles your personal information when you visit, register, or post.
What we collect
When you simply visit the forum without logging in, we collect:
- Your IP address (used by the web server for rate limiting and basic abuse prevention)
- Standard HTTP request data (browser user-agent, referrer, requested URL, response status)
- Cookies strictly necessary for the site to function (session ID, language preference, remember-me preference if you tick that on login)
When you register or post, we additionally collect:
- The username, email address, and password hash you provide
- The IP address from which each post or message is made (used for spam/abuse handling, visible only to forum administrators)
- Any avatar image, signature, or profile information you choose to set
- The content of your posts and any private messages you send through the forum
What we do not collect
We do not run third-party analytics (no Google Analytics, no Meta Pixel, no Hotjar, no fingerprinting). We do not sell, share, or transfer personal data to third parties. We do not embed third-party social-media widgets or tracking pixels.
Web fonts are loaded from Bunny Fonts, an EU-hosted GDPR-compliant alternative to Google Fonts that does not log IP addresses.
Why we collect it
- Your account: so you can post and so other members can recognize your contributions over time
- Your email: for password resets, optional notifications you opt into, and contacting you about account issues
- Your IP and request data: security, debugging, and complying with takedown / abuse requests if needed
Your rights
If you are in the EU, EEA, UK, or any jurisdiction with comparable privacy law, you have the right to:
- Access the data we hold about you
- Correct or update inaccurate information
- Delete your account and associated personal data (your forum posts can either be deleted or have their author replaced with \"anonymous\" at your request)
- Receive an export of your data in a machine-readable format
- Withdraw consent for any processing that depends on consent
To exercise any of these rights, contact us via the address listed at the bottom of this page.
Data retention
Account data and posts remain until you ask us to remove them. Server logs (IP, request line) are retained for 30 days for security purposes, then rotated and deleted. Backups are retained for 90 days then deleted on rotation.
Cookies
See our separate Cookie Notice for the full list of cookies and what each does.
Changes
If this policy changes materially, we will post a notice on the front page of the forum and inform registered users by email at least 14 days before the change takes effect.
Contact
For privacy-related questions or to exercise your rights under this policy, write to:
Last updated: 2026-04-28.