PRIVACY POLICY

01 Who we are

BROKEBRO is a community project building a contribution-based identity and history system. The official public contact for privacy questions is @BrokeBroSOL.

02 Information we process

Depending on how you use the service, we may process:

• X OAuth identity information returned by X, including provider user ID, username, profile information, and email only when X supplies it with permission.
• Supabase authentication identifiers and session/security information.
• Your permanent BROKE ID, Passport status, join date, Season participation, verified contribution count, and XP history.
• Contribution submissions, titles, categories, proof links, visibility choices, review status, and moderation records.
• Limited technical data such as IP-derived rate-limit records, request logs, browser information, a pseudonymous visitor cookie, and aggregated traffic measurements.

The V4 Passport flow does not require a wallet connection. BROKEBRO will never request a seed phrase, private key, wallet password, or remote access to your device.

03 How we use information

• Authenticate a real X identity and prevent duplicate Passports.
• Issue and preserve a unique BROKE ID.
• Receive, review, approve, reject, or retract contribution submissions.
• Maintain accurate XP, Season, audit, and permanent contribution history.
• Enforce limits, investigate abuse, secure the service, and diagnose failures.
• Measure basic site use and improve the product without fabricating activity.

04 Public and private information

BROKE ID, public username, public Passport fields, and contributions you mark public may be visible to anyone. Pending and rejected contributions do not enter public permanent history. A private contribution is omitted from public views. When a public contribution has private proof, the proof link is not returned publicly.

Visibility settings do not make the underlying moderation and integrity record disappear. Authorized operators may still access private submissions when needed for review, security, disputes, or legal compliance.

05 Service providers and disclosures

BROKEBRO relies on service providers for authentication, database hosting, site hosting, security, and analytics, including X and Supabase. They process information under their own terms and privacy policies. We may disclose information when legally required, to protect users, or to investigate fraud, abuse, or security incidents. We do not sell personal information.

06 Retention and permanent history

BROKE ID and verified contribution history are designed to remain stable. Retiring an account does not renumber an issued BROKE ID or silently delete append-only XP and audit history. Private proofs and operational logs are retained only as long as reasonably needed for review, security, integrity, disputes, backups, and legal obligations.

07 Your choices and rights

You can choose public or private visibility where the product provides that control, avoid submitting a contribution, sign out, or request account retirement. Depending on your location, you may also request access, correction, restriction, objection, or deletion of eligible personal information. Some integrity records may be retained when deletion would break permanent history, security, legal obligations, or the rights of others.

08 Security, age, and changes

We use access controls, row-level security, restricted public data surfaces, and operational monitoring, but no online system is risk-free. The service is not directed to children under 18. We may update this policy as the product or law changes; the date above will be revised when material changes are published.