Attested.to

Privacy policy

Draft adapted from a standard template. Have it reviewed before any public launch.

Attested ("we") operates the attested.to website and service. This policy explains what personal information we collect, why, and what you can do about it.

Information we collect

  • Account data. Your email address, display name, and (if you sign in with Google or Apple) the profile information those providers share with us — name, email, and avatar. We request only the email and profile scopes.
  • Content you create. Statements, votes, comments, market proposals, definitions, and other contributions you make on the site. This content is public by design and attributed to your display name.
  • Reputation data. Participation and calibration scores computed from your activity, shown alongside your contributions.
  • Email preferences. Whether you've opted out of the weekly digest, and the unsubscribe token that implements it.
  • Technical data. A strictly necessary session cookie, and standard server logs (IP address, request timestamps) kept for security and debugging.

How we use it

  • To create and authenticate your account (magic links, Google or Apple sign-in).
  • To send transactional email — sign-in links and the weekly digest you can unsubscribe from at any time.
  • To operate the service: evaluating statements, computing verdicts and reputation, and moderating content.
  • To respond to support requests sent through the contact form.

We do not sell your information, run advertising trackers, or use it to build behavioral profiles.

Sharing and processors

We share personal information only with service providers that help us operate:

  • Postmark — delivers our email (sign-in links, digests, notifications).
  • Google and Apple — authentication providers; they process your sign-in under their own privacy policies.
  • Criteriabot — our moderation service, which evaluates reported content.

We may also disclose information when required by law or to protect the rights, property, or safety of the service and its users.

Cookies

We set one strictly necessary session cookie to keep you signed in. We do not use tracking, advertising, or third-party analytics cookies.

Retention, deletion, and account closure

We keep your account data — including the profile information received from Google or Apple — only while your account is active.

To delete your account (email address, authentication identifiers, display name, and avatar), use the delete-account control on your account settings page, or the contact form if you can no longer sign in. Because your contributions are part of a public reasoning graph, deletion anonymizes your attribution (the display name is replaced) rather than removing the content itself: statements and positions stay, attributed to a deactivated account; your comments are removed. Everything else tied to your account is erased and sign-in is permanently blocked.

Your rights

Depending on where you live (including under the GDPR and CCPA), you may have the right to access, correct, export, or delete your personal information, and to object to certain processing. To exercise any of these, use the contact form.

Children

The service is not directed at children, and we do not knowingly collect information from anyone under 16.

Changes to this policy

We may update this policy as the service changes. Material changes will be announced on the site before they take effect.

Contact

Questions about this policy or your data? Use the contact form and we'll respond.