Privacy Policy
StillwaterTalk.com is a community discussion forum for the Stillwater, Oklahoma area. We try to collect as little as possible. This page explains what is stored and why.
What we store
- Your content: posts, comments, reports and messages you send through the “Contact the admin” form (including the optional reply contact you type in), and the time each was created. Posts and comments are public. Messages to the admin are visible only to the admin.
- Anti-abuse fingerprints (hashed): with each post, comment, report, signup and message we store a salted one-way hash of your network address (IP) and a salted hash of a random device cookie (
sb_dev, kept up to 1 year). The app does not store raw IP addresses. These hashes are used only for abuse prevention: rate limits, spam checks and bans. They can’t be turned back into your IP, but they let us recognise a banned device or network. - Usernames (optional): if you create one, we store the username and a salted, slow hash of your passphrase (never the passphrase itself). There is no email address, so a lost passphrase cannot be recovered. While logged in, a session cookie (
sb_user, up to 30 days) keeps you signed in; it is removed when you log out. Posts you make under a username are linked to that username; posts you make anonymously are not shown with it. - Admin cookie: the site admin has a separate login cookie. It is not set for visitors.
- Short-term counters: anonymous rate-limit events (hashed keys and timestamps) are kept for about a day.
Deleted content
When you or a moderator delete a post or comment, it is removed from public view but may remain in our database (marked as deleted) for moderation, abuse prevention and legal reasons.
Cloudflare and third parties
The Site runs on Cloudflare. Cloudflare processes requests and may log IP addresses and other technical data under its own policies (see Cloudflare’s privacy policy); this is outside the app’s control. We may use Cloudflare Turnstile, a CAPTCHA alternative, on forms to block bots; Turnstile may process your IP address and browser signals to decide whether you are human. We may also use Cloudflare Web Analytics, which gives us privacy-friendly traffic statistics without cookies or tracking you across sites. We do not use advertising trackers.
What we do not do
- We do not sell or rent your data, and we do not share it for advertising.
- We do not ask for your real name, email address or phone number.
Legal process and safety
We may disclose information we hold (for example, content and the hashed identifiers above) if we believe in good faith that a law, subpoena, court order or other valid legal process requires it, or to protect someone from serious harm. Because we store hashes rather than raw IPs, we generally cannot tell anyone your IP address. Cloudflare may hold more.
Removing content or asking about your data
If you have a username you can delete your own posts and comments while logged in. To ask us to remove any content, or to report content that is defamatory, unlawful or exposes your private information, use the Contact the admin form (Report content) and include a link to the post or comment, what is wrong, and why. See section 7 of the Terms of Use. Anonymous content has no ownership proof, so we can’t verify that someone is its author, but we can review and remove it under our Terms.
Security
We use hashing, HTTPS and access controls, but no system is perfectly secure. Don’t post sensitive personal information.
Age
The Site is for people 18 and older. We do not knowingly collect information from anyone under 18. If you think a child has used the Site, tell us through the contact form and we will remove the content.
Changes
We may update this policy. The effective date above shows when it last changed.