Privacy Policy

Version 2026-10-11. This policy describes the data processed by the current TruWhos build.

Controller

The service is operated by TruWhos. Signed-in privacy controls are available in Settings. If you cannot use those controls, contact TruWhos through the official Discord server: https://discord.gg/gJNF5heYFN.

Data processed

TruWhos stores Discord User IDs and, when available through an exact-ID lookup or the account's own OAuth login, username, display name and avatar identifier. Signed-in accounts also store OAuth-derived account identity, Terms/Privacy acceptance versions, login sessions and security metadata.

The service also stores community ratings, rating weights and comments; private reports and evidence links; moderator notes and decisions; public history entries; appeals; TruWhos opt-out status and moderation restrictions; privacy requests; self-service data-export activity; search activity used for recent-search history and guest limits; and moderation audit logs.

OAuth tokens

Discord OAuth access tokens are used to fetch the signed-in account during login and are not retained by this build after the login flow completes.

Purposes

Data is used to provide account lookup and reputation features, authenticate users, prevent abuse, enforce search limits, process reports and appeals, maintain moderator audit trails, operate privacy controls, secure sessions and maintain the service.

Legal basis before public launch

This development build does not make a final legal determination for every production processing purpose. Before public launch, the operator must document the applicable lawful basis for third-party profile/reputation processing and complete any required legitimate-interest, child-safety, criminal-offence-data or other assessments. This draft must be reviewed against the final deployment and jurisdiction.

Retention

Expired login sessions are deleted by automated maintenance. Optional analytics events are deleted after 30 days and recent-search events after 90 days in the current build. Reports, moderation history, appeals, audit records and privacy requests are retained according to operational, legal and dispute-resolution needs; production retention periods must be finalized before launch.

Your controls

Signed-in users can opt their TruWhos profile out where available, view active sessions, revoke sessions, log out everywhere, instantly download an account/activity data export, submit correction, deletion and objection requests, and appeal eligible moderation decisions. An active TruWhos opt-out restriction may disable the product opt-out button, but does not disable privacy or legal-request tools.

Security

TruWhos uses hashed session tokens, HttpOnly session cookies, CSRF protection, rate limits, server-side authorization checks, security headers, parameterized PostgreSQL queries, moderator audit logs, a loopback-only origin behind Cloudflare Tunnel, and encrypted HTTPS in production.

Recipients

Production deployment uses a self-hosted Raspberry Pi origin, Cloudflare for DNS, HTTPS, CDN/WAF/DDoS protection and Tunnel connectivity, and Discord for OAuth/API functionality. Any additional processors or analytics providers must be added to this policy before they are enabled.