Privacy Policy
Last updated: June 2025
Overview
- ArguCheck takes your privacy seriously. This policy explains what data we collect, why, and how we protect it.
Data Controller
- ArguCheck is operated as a personal project. For privacy inquiries, contact us via the email below.
What We Collect
- Email address — for authentication only. Never displayed publicly.
- • Nickname — your public display name. You choose it freely.
- • Password — stored as a bcrypt hash. We never see your plaintext password.
- • Claims, ratings, and relations — the content you create on the platform.
- • AI API keys (optional) — encrypted with AES-256-GCM. Used only to call your chosen AI provider on your behalf.
- • Server logs — IP addresses are not stored. User IDs are hashed (SHA-256) in logs for debugging.
- • Session cookies — technically necessary for authentication. No tracking cookies.
Why We Collect It
- Email + password: to authenticate you and enable password reset.
- • Claims + ratings: to provide the core debate platform functionality.
- • Logs: to debug errors and prevent abuse (rate limiting).
Data Sharing
- We do not sell, rent, or share your personal data with third parties. Your data is processed only by:
- • AWS (DynamoDB, Lambda, Cognito) — EU region (eu-central-1) for data storage and processing.
- • Your chosen AI provider (only if you configure AI) — your API key is sent directly to the provider you selected.
Data Retention
- Account data: kept until you delete your account.
- • Public claims and ratings: kept indefinitely (they are part of the public debate record).
- • Server logs: auto-deleted after 90 days.
- • Notifications: auto-deleted after 90 days.
Your Rights (GDPR)
- Access — request a copy of your data.
- • Deletion — delete your account and all associated data (Profile → Delete Account).
- • Portability — export your data (Admin → Export for admins, or contact us).
- • Correction — edit your nickname and claims at any time.
- • Objection — contact us to object to specific processing.
Cookies
- We use only technically necessary cookies for authentication (session token). No analytics, no tracking, no third-party cookies.
Children
- ArguCheck is not directed at children under 16. We do not knowingly collect data from minors.
Changes
- We may update this policy. Changes will be posted on this page with an updated date.
Contact
- For privacy questions or data requests, email:
- • privacy@argucheck.com