STAYABIT / THE DETAILS

Privacy

We store your username, password hash, profile settings, sessions, submitted Bits, likes, saves, follows, reports and completion history in Cloudflare D1.

Your public profile and completion activity are visible unless you choose a private profile.

Completion photos are stored privately in Cloudflare R2 and written results in D1, visible only to their owner and administrators while pending.

Image metadata is removed before storage.

After approval or rejection, written evidence is cleared and photo deletion is attempted immediately; failed deletions are retried hourly and closed evidence cannot be viewed.

Unreviewed evidence expires after 30 days.

We retain the submission date, requirement, decision, rejection reason, reviewer and XP record.

Provider backups may retain deleted database data for their retention period.

Never submit private documents or sensitive personal details.

We do not request your precise location or use advertising trackers.

Rate limits use short-lived salted hashes derived from the connection address, not a stored raw IP.

Cloudflare processes network metadata to operate the service.

Guest adventures may be saved on this device.

A service worker caches only the offline fallback and static assets, never profile pages or API responses.

Account recovery by email is not available.

For account/data requests, use the repository issue tracker without posting private information; the operator must publish a dedicated contact and retention policy before commercial launch.

This starter policy requires legal review.