Privacy Policy

Last updated: [17/10/2025]

Who we are

Thread Devils (“we”, “us”) is an online discussion forum.

Contact: [no-reply@thread-devils.com]
ICO registration number: [ICO number]

What we collect

• Account details: username, email address, password (hashed), registration IP, consent choices.
• Content & activity: posts, messages, reactions, reports, moderation actions, timestamps.
• Technical data: IP addresses, device/user-agent info, security & event logs, and essential cookies required for site security and basic features.
• Optional data (you choose to provide): profile fields, uploaded media, and—if enabled—analytics, which only run after you give consent.

Why we use your data (lawful bases)

• Provide the service (create & maintain your account, deliver forum features) — contract.
• Safety & moderation (detect abuse/spam, enforce rules, keep audit trails) — legitimate interests and legal obligations.
• Legal compliance (respond to lawful requests, keep certain records) — legal obligation.
• Analytics/measurement (if enabled) — consent. Non-essential cookies are not set until you opt in.

Cookies & similar technologies

We use essential cookies that are required for security and basic features, and optional cookies (like analytics) that only run after you consent via our banner.

• Essential cookies (always on): e.g. xf_session (session), xf_csrf (security), xf_user (“remember me”), xf_push (push notifications). Blocking these may break the site.
• Optional cookies: analytics/measurement or embeds. These are disabled until you accept them. You can change your choice at any time via the Cookies link in the footer.

Who processes your data (disclosures & processors)

We use service providers acting under data-processing agreements:

• Hosting: [Hostinger] — servers, storage, and backups.
• Email delivery: [Hostinger] — account and transactional emails.
• Anti-spam/abuse: [StopForumSpam/reCAPTCHA]
• Analytics: [Google Analytics 4] (only after consent).

We may disclose data where required by law or to protect users and the service.

International transfers

Where a provider stores data outside the UK, we rely on an adequacy decision or Standard Contractual Clauses, as applicable.

How long we keep data

• Account & profile: for as long as your account is active. If you close it, we delete profile data and may pseudonymise your posts where feasible, retaining what we must for legal/safety reasons.
• IP & security logs: [e.g., 90–180 days].
• Reports/moderation logs: [e.g., 2 years] to evidence decisions.
• Backups: rolling backups kept for [e.g., 30–60 days].

Your rights

You can request access, correction, deletion, restriction, portability, or object to certain uses. Where we rely on consent, you can withdraw it at any time (this does not affect prior lawful use). To exercise rights, email [no-reply@thread-devils.com]. We may ask for verification.

Age Requirements

• This service is for 18+ only. We do not knowingly permit children to register.

Security

We use HTTPS, role-based admin access, multi-factor authentication for staff, and regular patching. No method is perfectly secure, but we work to protect your data.

Data breaches

We maintain an incident log and will assess, and where required, notify the ICO and affected users within applicable timeframes.

Complaints

Please contact us first at [no-reply@thread-devils.com]. You may also complain to the UK Information Commissioner’s Office (ICO).

Changes

We update this policy when needed. Material changes will be flagged on the site.

CAPTCHA privacy policy

This site is protected by reCAPTCHA and the Google privacy policy and terms of service apply.