Privacy Policy

Last updated: April 5, 2026

Surbias ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights with respect to that information. By using Surbias, you agree to the practices described here.

1. Information We Collect

We collect only what is necessary to operate the Service:

• Email address — collected only if you choose to register for an account. Not required to read or submit stories anonymously.
• Hashed IP address — we store a one-way hash of your IP address for rate-limiting and abuse prevention purposes. The original IP address is not stored.
• User-generated content — the stories, comments, or other content you submit to the platform, along with metadata such as the submission timestamp and selected category.
• Authentication tokens — session data necessary to keep you logged in if you have an account.

2. How We Use Information

We use the information we collect to:

• Provide, operate, and improve the Surbias platform.
• Authenticate users and maintain account security.
• Moderate content and enforce our Terms of Service.
• Prevent spam, abuse, and unauthorized access through rate limiting.
• Respond to support requests or inquiries you send us.

We do not sell your personal information to third parties, and we do not use it for advertising or profiling purposes.

3. Cookies

Surbias uses a minimal set of cookies:

• Session cookies — used to keep you logged in during a browsing session if you have an account. These expire when you close your browser or log out.
• Cloudflare Turnstile — we use Cloudflare Turnstile for bot protection on submission forms. Turnstile may set cookies or use browser storage as part of its challenge flow. See Cloudflare's Privacy Policy for details.

We do not use tracking cookies, advertising cookies, or cross-site analytics cookies.

4. Data Storage

Surbias is built on Cloudflare infrastructure, including Cloudflare Workers and Cloudflare D1 (database). Your data is stored on Cloudflare's global network. Cloudflare maintains appropriate security safeguards in accordance with industry standards. For more information, see Cloudflare's Privacy Policy .

5. Third-Party Services

We work with the following third parties, each with their own privacy practices:

• Cloudflare — infrastructure, CDN, bot protection (Turnstile), and DNS. Privacy Policy.
• Google — if you choose to sign in with Google, Google will share your email address and profile identifier with us. We do not receive your Google password. Privacy Policy.
• Ko-fi — our support page is hosted on Ko-fi. If you visit ko-fi.com/surbias, Ko-fi's own privacy policy applies. Privacy Policy.

6. Data Retention

We retain your data for as long as needed to provide the Service and comply with our legal obligations:

• Anonymous posts — kept indefinitely unless you request deletion or the content is removed for a Terms violation.
• Account data — retained until you delete your account. Upon deletion, your email and authentication data are removed. Posts you made while logged in may be converted to anonymous or deleted, per your preference at time of deletion.
• Hashed IP addresses — retained for a rolling period sufficient for rate-limiting purposes (typically 30 days), then purged.

7. Your Rights

Depending on your location, you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — request that inaccurate data be corrected.
• Deletion — request that your personal data be deleted ("right to be forgotten").
• Data portability — request your data in a structured, machine-readable format.
• Objection — object to certain processing of your data.

To exercise any of these rights, contact us at admin@surbias.com. We will respond within 30 days.

8. Children's Privacy

Surbias is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

10. Contact

If you have questions, concerns, or requests relating to this Privacy Policy, please reach out at admin@surbias.com.