Privacy Policy

• By default, your posts and comments appear without your name. If you choose to set a username or display name on your account, that public identity appears alongside the content you post.
• “Anonymous to other users” is not the same as “anonymous to us.” We keep internal records connecting content to devices and accounts so we can keep the community safe, enforce our policies, and comply with the law.
• Gabberhood is built around location. We use your precise location (with your permission) or an approximate location based on your IP address to show you a local feed.
• We use AI systems to help moderate content. Content you submit is processed by our AI service providers for that purpose.
• We collect device and usage signals to fight spam, bots, vote manipulation, ban evasion, and location spoofing.
• We do not sell your personal information.

Content. Posts, comments, images, votes, reports, appeals, and any other material you submit through the Service. Even when content is displayed anonymously, we store it together with the device and (if you have one) account it came from.

Account information. Creating an account is optional for browsing. If you create one, we collect your email address, phone number, and — optionally — a username and display name. Sign-in uses one-time codes sent to your email, so we never collect or store a password. In jurisdictions that require it, we may also collect your date of birth to verify eligibility.

Communications. Messages you send us, such as support requests, appeal submissions, and survey responses.

Location information. If you grant location permission, we collect your device’s precise location to build your local feed and to attach a neighborhood to posts you create. If you don’t, we estimate an approximate location from your IP address. Posting requires location permission. We also analyze location signals to detect location spoofing, which violates our Terms.

Device and installation identifiers. When you install our app or visit our site, we generate an installation identifier stored on your device. If you sign in, we associate that installation with your account.

Device signals and integrity data. We collect technical information about your device and connection — such as device model, operating system, browser type, language, app version, IP address, network information, and platform integrity or attestation results (for example, Google Play Integrity or Apple App Attest). We may combine these signals to recognize devices across installations and to build trust and integrity assessments. We use this strictly for safety, security, and platform-integrity purposes: detecting bots and coordinated manipulation, weighting votes, enforcing suspensions, and preventing ban evasion.

Usage information. How you interact with the Service — pages viewed, posts seen, taps, votes, session length, feature usage, and similar analytics events. This includes session replay: a reconstruction of how you move through screens (taps, scrolling, navigation). Text you type is masked on your device and never appears in replays. We use PostHog to help us collect and analyze this data.

Cookies and local storage. We use cookies and similar technologies (such as browser local storage) to remember your preferences, keep you signed in, and understand how the Service is used. Your browser settings can limit cookies, though parts of the Service may stop working.

Log data. Standard server logs, including IP address, request timestamps, and error diagnostics.

We estimate approximate location from IP addresses using third-party geolocation data (provided by DB-IP). We may also receive technical signals from platform providers such as Apple and Google (for example, push notification tokens and device integrity verdicts).

• Provide the Service — build your local feed, attach neighborhoods to posts, display content, deliver notifications, and operate accounts.
• Moderate content — review posts, comments, and images against our Content Policy, using a combination of automated AI review and human review, and handle reports and appeals.
• Keep the platform safe — detect and prevent spam, bots, fraud, vote manipulation, harassment, location spoofing, ban evasion, and other abuse; protect the integrity of votes and rankings; and respond to urgent safety situations.
• Improve the Service — analyze usage to understand what works, debug problems, and develop new features.
• Communicate with you — send verification codes, service announcements, and (if you opt in) push notifications you can customize or turn off.
• Comply with the law — meet legal obligations, respond to lawful requests, and enforce our Terms and policies.

If we ever introduce advertising, we will update this Policy first and explain what (if anything) changes about how your information is used.

By default, your posts and comments are shown to other users without your name or any public identity. If you choose to set a username or display name on your account, that identity is shown publicly alongside the content you post — including a display name you set to your real name. Aside from any identity you choose to display, other users cannot see who wrote a post.

Internally, however, we maintain records linking content to the installation, device, and account it came from. We keep these links because they are essential to running a safe anonymous platform: they let us remove bad actors rather than just bad posts, stop the harassment campaigns that have destroyed platforms like this before, and respond to genuine emergencies. Anonymity on Gabberhood protects you from other users — it is not a shield for threats, harassment, or illegal activity.

We use AI models (currently provided by Anthropic) to review content submitted to the Service. Content you post, including images, is sent to our AI service providers for moderation analysis. These providers process content on our behalf and are not permitted to use it for their own purposes beyond providing the service to us.

Automated moderation decisions can affect whether your content is displayed and whether your account receives a strike or restriction. If you believe an automated decision was wrong, you can appeal it through the Service and a decision will be reviewed.

We do not sell your personal information. We share it only as follows:

• Service providers — companies that process data on our behalf under contractual confidentiality obligations, including cloud hosting (Railway, Vercel), database hosting (Neon), file storage (Cloudflare), analytics (PostHog), error and crash monitoring (Sentry), AI moderation (Anthropic), email delivery (Resend), and push notification delivery (Apple, Google).
• Legal and safety disclosures — we may disclose information to law enforcement or other parties when we believe in good faith that disclosure is required by law (for example, in response to a subpoena, court order, or other legal process), or is necessary to prevent imminent harm to a person, to investigate threats of violence or other urgent safety issues, or to protect the rights, property, and safety of Gabberhood, our users, or the public.
• Business transfers — if Gabberhood is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy’s commitments.
• With your direction — for example, when you use the share feature to send a post somewhere else.
• Aggregated or de-identified data — we may share information that cannot reasonably be used to identify you.

We retain information for as long as needed to provide the Service and for the purposes described above. A few specifics worth knowing:

• When you delete a post or comment, its content is removed from public view immediately. We retain a copy in restricted internal storage for a limited period for safety investigations, legal compliance, and abuse prevention.
• Safety and integrity records are retained indefinitely. These include moderation history, device and installation identifiers, IP addresses, and device trust signals. Running a safe anonymous platform depends on recognizing devices and networks that have abused it before, and abuse patterns play out over months or years — so we deliberately do not put an expiration date on these records. They are held in restricted internal storage and used only for the safety, security, and legal purposes described in this Policy.
• When you close your account, we delete or de-identify your account information within a reasonable period. The safety and integrity records described above — including the internal links between past content and the device it came from — persist after account closure, so that closing an account cannot be used to escape a suspension or erase a history of abuse.

• Location — you control location permission through your device or browser settings. Without it, you can still browse using an approximate feed, though posting requires location.
• Notifications — push notifications are opt-in, customizable by category, and can be turned off at any time in settings or at the device level. The only emails we send are transactional, such as sign-in codes — we do not send marketing email.
• Content — you can delete your posts and comments at any time.
• Account closure — you can close your account from settings or by contacting us.
• Cookies — you can limit cookies through your browser settings.

Depending on where you live, you may have legal rights over your personal information, including the rights to access, correct, delete, or receive a copy of it, to restrict or object to certain processing, and to withdraw consent.

United States. Residents of California and other states with comprehensive privacy laws may have rights to know, access, correct, delete, and opt out of the sale or sharing of personal information, and the right not to be discriminated against for exercising those rights. We do not sell personal information or share it for cross-context behavioral advertising.

European Economic Area and United Kingdom. We process personal data under the legal bases of performance of a contract (providing the Service), legitimate interests (safety, security, and service improvement), consent (where required, such as precise location), and legal obligation. You may also lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at privacy@gabberhood.com. We will verify your request — which may be harder for unauthenticated anonymous use, since we may have no way to reliably connect you to a device’s history — and respond within the time required by applicable law.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Where local law sets a higher minimum age, that higher age applies. If you believe a child has provided us personal information, contact us at privacy@gabberhood.com and we will delete it.

We use technical and organizational safeguards designed to protect your information, including encryption in transit, access controls, and restricted internal access to identity-linking data. No system is perfectly secure, so we cannot guarantee absolute security — because sign-in codes are delivered to your email address, please keep access to your email account secure.

Gabberhood Inc. is based in the United States and processes information there and in other countries where our service providers operate. These countries may have data protection laws different from those in your jurisdiction. Where required, we use appropriate safeguards for international transfers.

We may update this Policy from time to time. If we make material changes, we will notify you through the Service or by other reasonable means before the changes take effect. The effective date at the top tells you when this Policy was last revised. Your continued use of the Service after changes take effect means you accept the updated Policy.