Privacy Policy

This describes what Spartacus.cv actually collects and does with it today, as a small beta product — not a template. It'll get more formal as the platform grows, but the substance won't get worse for you.

1. Information we collect

• Account info: name, username, email address, and a password. Your password is never stored in plain text — it's hashed with scrypt before it touches the database, and we can't recover or view it.
• Profile info you add: bio, specialties, interests, avatar image or URL.
• Content you create: projects, project updates, social posts, comments, direct messages to other members, and any media (images/video) you upload.
• Activity data: votes you cast, your Drachma transaction ledger, who invited/referred you and whom you've referred, bookmarks, follows, and notifications.
• Session data: a single authentication cookie tied to a server-side session token, so you stay logged in. Sessions expire after 30 days.
• Abuse-prevention data: login attempts are rate-limited per account and per source to block credential-stuffing and brute-force attempts.

We don't ask for or collect payment information, government ID, or precise location. Photos/videos you upload may contain metadata (like camera info) embedded by your device — we don't currently strip it, so avoid uploading media you wouldn't want that attached to.

2. How we use it

• To run the core product: your feed, profile, votes, ledger, notifications, and messages.
• To enforce the Drachma economy — grants, spend, and the periodic balance reset.
• To keep you logged in via your session cookie.
• To moderate the platform — every admin action (removing content, adjusting a balance, deleting an account) is written to an internal audit log.
• To respond when you message the development team.
• To detect and block abuse (vote manipulation, credential stuffing, spam).

We don't use your data for ad targeting, and we don't run third-party analytics or ad trackers on the platform.

3. What's public vs. private

• Your username, name, bio, avatar, specialties/interests, published projects and posts, comments, and vote/leaderboard activity are public by design — that's the point of a platform built on visible work.
• Your email address is not shown publicly. It is, however, a platform feature: any logged-in member can spend Δ2 to reveal another member's email in order to contact them (e.g. a recruiter reaching out). This is a deliberate, priced product mechanic — not an accident — and it means your email isn't secret from other members of the platform, even though it's never displayed on your public profile.
• Direct messages are visible only to sender and recipient (and, if needed, an admin investigating a report).
• Your password is never visible to anyone, including us, in a usable form.

4. Sharing

We don't sell your data, and we don't share it with advertisers or data brokers. We may disclose information if required by law, or to investigate abuse, fraud, or a security issue affecting the platform.

5. Cookies

We set one functional cookie to identify your session and, on the public gate, a cookie remembering whether you're in Demo or Beta mode. Neither is used for advertising or cross-site tracking.

6. Data retention & deletion

• We keep your data while your account is active, plus what's needed to keep the Drachma ledger consistent and the audit trail honest.
• Account deletion isn't self-serve yet during the beta — message the development team to request it. When an account is deleted, we permanently remove the account, its projects, posts, and ledger history, and its votes/comments/messages/sessions cascade-delete with it. This can't be undone.
• Demo-mode data is seeded, fake, and may be reset at any time — don't put anything real into it.

7. Security

Passwords are hashed with scrypt (never stored or logged in plain text). Login and sign-up are rate-limited to slow down automated attacks. That said, this is an early-stage beta product built and run by a small team, not an audited enterprise system — treat it accordingly, and don't reuse a password here that protects something more sensitive elsewhere.

8. Children

Spartacus.cv isn't directed at children under 16, and we don't knowingly collect data from anyone under that age. If you believe a minor has an account, message the development team and we'll remove it.

9. Changes to this policy

We'll update this page as the platform's data practices change, with a new "last updated" date. We won't quietly expand what we collect or how we use it without reflecting that here first.

10. Contact

Questions, deletion requests, or anything else privacy-related: message the development team through the in-app messaging system.