What Cureate keeps
Last updated 28 September 2026
Draft: this site has not said who runs it yet, so the operator, the contact address and the law below are still placeholders in square brackets. Nothing here is in force until they are filled in.
[OPERATOR LEGAL NAME] runs Cureate and decides what happens to the data in it. This page says what we keep, why we keep it, and how to get it back or get rid of it. Anything you want to ask or ask for: [OPERATOR CONTACT EMAIL].
What you tell us
- Your name and your email address.
- Your password - as a hash it cannot be read back out of, never as you typed it.
- Your handle and your board: everything you put on it. A published board is public, by design.
- The files you upload, and the interests you pick.
- Which boards you follow.
Your date of birth
Asked once, at sign-up, for one purpose: working out whether we are allowed to give you an account. The answer decides that and is then gone. It is not saved to your account, never appears on your board, and is not used for anything else. If the answer means we cannot give you an account, your browser keeps a cookie saying so, so the form does not ask you all over again.
What your browser tells us
- Your IP address and your browser's user-agent, kept with each sign-in so we can tell one session from another and stop somebody guessing passwords.
- A count of recent requests per IP address, or per account for what you do signed in, for the same reason. Each count covers a window of at most a minute; once the window has passed the count is cleared.
- Ordinary server logs of the requests made.
There is no advertising here, no analytics, no tracking pixel, and no third-party script on the page - except the anti-abuse challenge below, when it is switched on. Nothing is sold, and nothing goes to a data broker.
Cookies
One cookie to keep you signed in, and one to remember that we could not give you an account. That is the lot. None of them is for advertising, and none of them follows you to another site.
Who else touches it
- Hosting: the servers, database and file storage Cureate runs on.
- Email: confirmation and password-reset messages go out through a mail provider, which sees your address and the message.
- Anti-abuse: while a sign-up challenge is switched on, Cloudflare Turnstile sees your IP address and the fact that a challenge happened, and is used to tell people from scripts. Nothing else.
- Links: when you paste a link, our server fetches that page - so the site you linked to sees a request from us, not from the people reading your board.
Each of those handles data on our instructions and may not use it for anything of their own.
How long
Your account and your board, for as long as you keep them. Sessions, until they run out or you sign out. Request counts, for the minute they cover. Delete your account and the board, its uploads, its follows and its sessions go with it.
What you can ask for
A copy of what we hold, a correction to it, or its deletion - write to [OPERATOR CONTACT EMAIL]. Depending on where you live you may also be able to object to what we do with it, ask us to restrict it, or complain to your data-protection authority. The law of [JURISDICTION] applies to this notice.
Children
Cureate is not for children under 13, and we do not knowingly keep an account for one. If you think a child has an account here, write to [OPERATOR CONTACT EMAIL] and we will remove it.
Changes
The date at the top says when this last changed. A change that matters we will say out loud before it takes effect.