Privacy Policy

To run your account and keep reviews honest, we collect:

• Your username, email address, and a securely hashed password.
• The reviews you write and receive, and your ratings.
• Abuse-prevention signals: a device fingerprint (for example canvas, WebGL, fonts, screen, timezone, and language characteristics collected by our own first-party script), network information derived from your IP address, and a persistent first-party identifier stored in a cookie, in localStorage, and in IndexedDB. The identifier is designed to persist across visits and to restore itself if one copy is cleared.
• An append-only audit log of significant actions on your account.

Wherever matching still works, we store keyed hashes rather than raw values, so your email, IP address, and fingerprint are not held in a directly readable form.

We process your account data to provide the service you signed up for. We process the abuse-prevention signals under our legitimate interest in preventing fraud, ban evasion, and fake reviews. These signals surface correlations for human review by our moderators; no client-observable signal is treated as proof, and nothing is banned automatically on identity signals alone.

We use only first-party, functional storage: a session cookie to keep you signed in, and the persistent identifier described above for abuse prevention. We use no third-party trackers and no analytics.

Pook Premium is processed by Stripe, our payment processor and a recipient of the data needed to take payment. Your card details are entered on Stripe and never touch our servers. We store only the Stripe customer and session identifiers associated with your purchase.

Account data is kept while your account exists. Any raw IP addresses, if kept at all, are stored separately and automatically deleted after 90 days by a scheduled cleanup job; the keyed hashes used for abuse matching are retained while relevant. The audit log is retained under our legitimate interest in security and accountability.

You can download a copy of your data at any time from your Settings page. The export includes your profile, the reviews you have written and received, your badges, and your account activity. It excludes other users' data and the internal identity hashes used for abuse prevention.

You can also delete your account from Settings. Deletion removes your profile data and signs you out everywhere. Reviews you wrote are kept but anonymized to a deleted user, so ratings you gave to others still count toward their scores. For security and to prevent ban evasion, hashed ban-list identifiers and the audit trail are retained under our legitimate interest.

For any privacy request or question, contact us at privacy@pookreview.example. We will respond within a reasonable time.