Privacy Policy

This policy covers this website — shekyl.org, its accounts and its forum. It does not describe the Shekyl network, which is a different thing with different properties; see Technology for that.

The short version

You can read every public page on this site without an account, without cookies, and without being counted. We run no analytics, no advertising, and no third-party tracking of any kind. If you create an account, we keep what the account needs to work and nothing beyond it.

Browsing without an account

Public pages set no cookies and load no third-party scripts. Our web server keeps standard request logs — IP address, timestamp, requested path, user agent — which are used to operate and secure the service and are not used to build a profile of you.

The site is served through Cloudflare, which terminates connections on our behalf and therefore sees the same request metadata. Cloudflare acts as our infrastructure provider under its own terms.

If you create an account

We store:

• Your email address and display name. The email address is how you sign in and how we send account mail.
• A hash of your password — never the password itself.
• Multi-factor authentication material, if you enable it: a TOTP secret, registered passkey (WebAuthn) credentials, one-time email codes, and backup codes. Passkey private keys never leave your device and we never receive them.
• Account state — roles, whether the account is active, and creation and update timestamps.

You may sign in instead through the Foundation's identity provider (Keycloak). In that case your credentials are handled there, and this site receives your identity and role assignments.

If you post in the forum

Threads, posts and votes are stored with your account and your display name. Posts in public boards are visible to anyone, including people who are not signed in and search engines. Deleting a post removes it from view; treat anything you have already published as public.

Exchange features

Exchange functionality is not generally available and is restricted to administrators during development. Where an order is created, we store its amounts, status, the withdrawal address you supply and the resulting transaction records, because an exchange cannot settle without them.

Cookies

We use one category of cookie: the session cookie that keeps you signed in, plus the short-lived cookies the sign-in flow needs to complete safely. There are no analytics, advertising or cross-site tracking cookies. Signing out clears the session.

Who else sees your data

We do not sell, rent or trade personal data, and we do not share it for advertising. It is handled by the providers needed to run the site — our hosting provider, our email delivery provider (for account and verification mail), and Cloudflare — each acting on our behalf. We disclose data otherwise only where the law requires it.

How long we keep it

Account data is kept while the account exists. Ask us to delete your account and we will remove it and its authentication material. Forum posts may be retained in place, disassociated from your account, so that surrounding discussions remain readable — tell us if you want your posts removed as well and we will do that instead. Server logs are kept for a short operational period and then discarded.

Your choices

You can view and change your account details when signed in, enable or remove multi-factor methods, and request export or deletion of your data. To make a request, or to ask anything about this policy, contact us through the details on the security page.

Children

This site is not intended for children under 13, and we do not knowingly collect their data.

Changes

If this policy changes materially, we will revise the date above and note the change on the site. Shekyl has not launched, and this policy will be reviewed again before it does.