Privacy statement

Personal data we process

• Google/Firebase sign-in data such as your user ID, email address, display name, and profile photo when you choose to sign in.
• Waitlist records including approval status and timestamps when the waitlist feature is enabled.
• Comments and feedback, including page context, locale, and your account identifiers; administrator comments may also be copied into a GitHub issue for project tracking.
• Ask AI conversation history, usage metrics, and saved preferences when AI features are enabled and you choose to use them.
• Browser-side preference storage for functional settings such as theme, selected view mode, and selected class rule.
• Analytics data collected via PostHog, including page views, navigation patterns, clicks, interaction events, IP address (used for geolocation), browser and device information (user agent, screen size, etc.), and cookies or local storage identifiers used to recognize returning visitors.

Why we use this data

• To authenticate users and protect access-controlled features.
• To operate waitlist, moderation, and feedback workflows.
• To provide optional saved chat history and AI usage controls.
• To remember interface preferences and keep the site usable across visits.
• To monitor reliability, prevent abuse, and improve the service.
• To analyze user interactions and behavior patterns for product analytics and quality assurance purposes, helping us understand how users interact with the site and identify areas for improvement.

GDPR legal bases

• Performance of a service you request, such as sign-in, saved preferences, or optional AI history.
• Consent for optional submissions you choose to send, such as waitlist requests, comments, and AI prompts.
• Legitimate interests in keeping the service secure, auditable, and reliable, as well as understanding user behavior to improve our product and user experience.

Processors and data sharing

Protest Room uses third-party infrastructure that may process personal data on our behalf, including Vercel for hosting, Firebase/Firestore for authentication and application data, GitHub for issue tracking tied to administrator feedback, and PostHog for product analytics.

PostHog processes behavioral and analytics data (such as page views, clicks, and user interactions) to help us understand product usage and improve the user experience. Data is stored on PostHog's servers, and you can review PostHog's data processing agreement and privacy policy at their website.

If Ask AI is enabled, prompts and related context are sent to OpenRouter solely to generate the requested response.

Retention

• Account-linked records, waitlist entries, comments, and optional AI conversation history are retained only while they remain needed for the feature, moderation, audit, or support purpose they were collected for.
• Functional browser storage remains on your device until you clear it or change the saved preference.
• Platform providers may keep operational logs for their own limited retention periods.
• Analytics data collected by PostHog is retained according to PostHog's data retention policies.

Analytics

Protest Room uses PostHog for product analytics to collect behavioral data (page views, clicks, interactions, device and browser information) to help us understand how users interact with the site and identify opportunities for improvement and quality assurance.

Your GDPR rights

Where GDPR applies, you may request access, correction, deletion, restriction, portability, or objection regarding your personal data, and you may withdraw consent for optional processing you previously chose.

Signed-in users can delete all personal/private account data directly from the settings page using Delete all personal data. This removes account-linked chat history, pinned wording preferences, waitlist entries, comments, and the associated Firebase Auth account for Protest Room.

Please avoid submitting special-category or other sensitive personal data through comments, waitlist notes, or AI prompts.