What we store and why

Build progress, the projects you’ve viewed, your chosen level, and your light or dark theme are saved in this browser only. They are never sent to FlintMinds. You can clear them at any time with “Clear what this browser remembers” in the footer.

Your chosen level is also kept in a cookie so a guide opens at the right reading level. It holds only the level name.

We use Vercel Web Analytics and Speed Insights to count page visits and measure loading speed. They don’t use cookies, and we don’t use them to identify individual visitors.

• Username — public. It’s shown on anything you publish.
• Email address — private. Used to confirm your account, sign you in, and reset your password. It’s never shown to the public or other contributors; the site owner can see it in the account system.
• Name (optional) — private. Only you and the site owner can see it.
• Password — stored only as a secure hash by our account provider. We can’t see it. When you choose a password, we check it against lists of passwords exposed in data breaches. Only the first five characters of a one-way hash of the password are sent to the Have I Been Pwned service; the password itself never leaves our server.
• Google sign-in (if you use it) — Google shares your email address, name, and profile picture with our account provider, which keeps them with your sign-in. FlintMinds uses only the email address; your Google name and picture aren’t shown anywhere on the site. We never see your Google password.
• Drafts, submissions, and uploaded photos — private until a reviewer approves them. Photos are re-encoded when you upload them, which removes hidden details such as camera location.
• Review messages and notifications — visible only to you and the reviewer.
• Reports you make about published content — visible only to the reviewer.
• Security records — our account provider keeps records of sign-in activity, and we keep short-lived, scrambled counters to limit repeated sign-in and sign-up attempts.

Accounts, drafts, and photos are stored with Supabase, our database and account provider. The site is hosted by Vercel. Account emails (confirmation, sign-in links, password resets) are sent through our account provider.

When you register for a workshop or event, we store your registration, the number of seats, and whether you attended. The event’s host and the FlintMinds admins can see your username on the attendee list; other attendees can’t, and there’s no public list. We don’t ask for the names of children you bring.

The room, address, or join link for an event is shown only to people registered for it. Registrations are deleted 90 days after the event ends; we keep only the total number of seats and attendees for each event.

If you apply to mentor, we store what you tell us (areas, experience, availability, and an optional profile link) and that you confirmed you’re 18 or older. Only you and the FlintMinds admins can see it. Approved mentors can read guides and builds while they’re waiting for review, and send feedback that’s recorded with the review. Mentors never see your email address.

The author of a guide can invite you to its team by your username. If you accept, your username is shown on the published guide. You can leave a team at any time from My submissions.

Only content a reviewer approves is published: the guide or build itself, its approved photos, and your username. A shared build can show a nickname you choose instead. If you delete your account, published work is credited to “Community builder”. Your email, private name, drafts, review messages, and unapproved photos are never published.

Editing a published guide doesn’t change the public version until the new revision is approved.

Accounts are for people 13 and older. Younger builders can use every guide without an account. To share a younger builder’s project, a parent, guardian, or teacher can submit it from their own account. Please don’t include the child’s name, face, school, or location in text or photos.

You can delete your account from your Account page. Deleting removes your profile, drafts, pending submissions, private photos, notifications, event registrations, mentor applications and access, guide team credits, and your login. Guides and builds that were already published stay up, credited to “Community builder” instead of your username.

We keep a minimal record that a deletion happened: an internal account number and the dates. It isn’t linked to your email, name, or username. If any step of a deletion can’t finish right away, your Account page says so plainly and the deletion is completed as a tracked request.

Drafts and submissions are kept until you delete them or your account. We haven’t set automatic time limits for keeping them.

There isn’t a public contact address yet, and no other way to reach FlintMinds without an account. You can delete your account and all private data yourself from your Account page. Contact and reporting lists what you can do while signed in.