Privacy Policy

1. Information We Collect

When you use Birdchirp, we collect the following:

• Account Data: Your username, email, password (stored hashed), display_name, bio, avatar, and birthdate.
• Content: Posts, images, comments, groups, or other content you upload is stored and associated with your account ID.
• Direct Messages: DMs between users are stored on our servers so they can be delivered and displayed.
• Network & Security Data: We log your registration_ip when you sign up and your last_login_ip when you log in. We also log IP addresses for sessions, admin actions, IP bans, raid protection, internal records, and email/auth related events.
• Session Data: When logged in, we track sessions (session ID, IP address, user agent, activity) to keep you signed in and help protect your account.

2. How We Use Your Data

Your data is used to run the site, display your profile and posts, deliver DMs, keep accounts secure, prevent abuse/ban evasion, enforce our Community Rules, and protect the site. We do not sell your personal data to third parties.

3. Security

We may use third party security services like Cloudflare for DDoS protection and security. When you connect to Birdchirp, those services may process connection data. We use headers like CF-Connecting-IP or X-Forwarded-For when behind a proxy to log your actual IP address and not a proxy address.

4. Private Messages

Direct messages between users are stored on our servers so they can be delivered and displayed reliably. Messages removed by a user, or by our staff, are hidden from both participants.

5. Staff Access

To keep the platform safe, we reserve the right to review content on the site, including private messages, in order to enforce our Community Rules and to address safety, security, and legal concerns. By using the platform, you agree that content may be accessed and acted on as needed for these purposes.

6. Data Retention

Information is kept as long as your account is active. If an account is banned for violating our Community Rules, we retain the associated IP addresses to ensure the ban remains effective. Logs like admin actions, raid protection events, and sessions may be kept for security and enforcement purposes.

7. Account Deletion

If you request to delete your account, the account isn't actually deleted right away. It will be hidden forever after 30 days. This is so no one can just take your username. Some data may still be kept for security, ban enforcement, or legal reasons.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date below. Continued use of Birdchirp after changes means you accept the revised policy.

Last Updated: October 2026