More

Privacy Policy

How we collect, use, and protect your information.

Last updated: August 18, 2026

Introduction

This Privacy Policy describes how Jortion collects, uses, and protects your information when you use our service. These documents describe Jortion's current practices and are intended to provide transparency. They are not a substitute for legal advice.

By using Jortion, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create an account, we collect:

  • Email address for authentication
  • Username (unique identifier)
  • Full name (optional)
  • Profile picture you upload
  • Banner image you upload
  • Bio and profile information you choose to provide
  • Website URL (optional)

User-Generated Content

We collect content you create on the platform:

  • Posts and replies you publish (text content)
  • Reposts with optional quote content
  • Messages you send to other users
  • GIFs you select via Giphy integration
  • Likes, bookmarks, and follows

Settings and Preferences

We store your account settings and preferences:

  • Theme preference (light, dim, dark, system)
  • Privacy settings (account visibility, message permissions)
  • Notification preferences

Authentication and Session Data

To provide secure access, we collect:

  • Authentication tokens and session identifiers (via Supabase Auth cookies)
  • IP addresses temporarily for rate limiting (not logged long-term)
  • Temporary age attestation token during account creation (expires in 10 minutes)

Safety and Moderation Data

To maintain a safe platform, we collect:

  • Reports you submit
  • Blocked users list
  • Muted users list
  • Records related to moderation and enforcement actions for security purposes

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Authenticate users and secure accounts
  • Enable messaging and social features
  • Process your content and display it to others
  • Send notifications based on your preferences
  • Enforce our Terms of Service and Community Guidelines
  • Investigate reports and take moderation actions

Third-Party Services

We use the following third-party services to operate our platform:

  • Supabase: Database, authentication, and storage services
  • Vercel: Hosting and deployment infrastructure
  • Giphy: GIF search functionality (when you use the GIF picker)

These third-party service providers may process information as necessary to provide their services. We do not sell your personal data to third parties.

These services have their own privacy policies. We encourage you to review them.

Data Security

We take reasonable measures to help protect your information from unauthorized access, use, or disclosure. This includes:

  • Using encryption to protect data in transit
  • Access controls and authentication systems
  • Processing uploaded avatar and banner images to remove embedded location metadata when location sharing is not enabled

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. This includes:

  • While your account is active, we retain your account information and content
  • When you delete your account, we mark your account as deleted with a timestamp
  • Some information may remain in our systems where reasonably necessary and legally permitted or required, including for security, fraud prevention, moderation records, legal obligations, dispute resolution, enforcement of platform rules, audit logs, backups, or other legitimate purposes

Retention is subject to applicable law and our actual retention practices. We do not invent specific retention periods.

Your Rights and Choices

Depending on where you live and the laws that apply to you, you may have certain rights regarding your information:

  • Access and update your account information through your profile settings
  • Delete your account through settings
  • Export your data through the settings (generates a ZIP file)
  • Control your privacy settings and who can see your content
  • Manage your notification preferences
  • Block and mute other users

The specific rights available to you depend on applicable law in your jurisdiction. We do not claim that every user has every right everywhere.

Data Export

You can request a copy of your data through the Settings interface. The data export includes:

  • Account information (username, display name, bio, website)
  • Profile statistics (posts count, followers count, following count)
  • Privacy settings
  • Bookmarks (without media URLs)
  • Conversation metadata (without message content)

The export intentionally excludes sensitive information such as message contents, internal database IDs, and infrastructure URLs for security and privacy reasons.

Cookies and Local Storage

We use cookies and local storage to:

  • Keep you logged in during your session (via Supabase Auth cookies)
  • Remember your theme preference for unauthenticated users (localStorage)
  • Store recent GIF searches for the GIF picker (localStorage)

These are essential for the platform to function properly. We do not use tracking cookies for advertising or analytics purposes.

Account Deletion

You can delete your account through Settings. Before deletion:

  • You will be required to provide explicit confirmation
  • You will be warned that deletion is permanent
  • You can export your data before deletion

Upon permanent deletion, your account is marked with a deletion timestamp and you are signed out. However, some information may remain in our systems where reasonably necessary and legally permitted or required, including for security, fraud prevention, moderation records, legal obligations, dispute resolution, enforcement of platform rules, audit logs, backups, or other legitimate purposes. Some information may also remain in backups or logs as appropriate.

International Data Transfers

Jortion uses Supabase and Vercel as service providers. These services may store and process data in various locations. Information may be transferred to and processed in locations where these service providers operate, subject to applicable law and appropriate safeguards where required.

Children's Privacy

Jortion is intended only for users who meet the applicable minimum age. The minimum age is at least 13 years old, or the higher minimum age required by applicable law in your jurisdiction, whichever is higher. We do not knowingly collect personal information from users below the applicable minimum age.

During account creation, users must affirmatively attest that they meet the minimum age requirement. This attestation is a user statement and is not independent age verification. Jortion does not independently verify the age of users.

If we become aware that a user below the applicable minimum age has provided personal information, we may take steps to delete such information.

International Users

Jortion operates as a global online service. Depending on where you live, additional rights or legal protections may apply to you under local laws.

We seek to operate in accordance with applicable laws and regulations. However, the specific legal obligations that apply to Jortion depend on factors including the operator, operating jurisdictions, user locations, and applicable local laws.

Nothing in these documents is intended to remove or limit rights that cannot lawfully be waived or excluded.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Us

If you have questions about this privacy policy or our data practices, please contact us at:

support@jortion.com