Privacy policy

What we collect

• Account details: your username, email address and a hashed password. We never store your password itself.
• Profile details you choose to add: display name, bio, location, website, photo.
• Content you post: reviews, ratings, photos, owner responses and reports.
• Technical data: IP address and browser user-agent, recorded with sign-ins, reviews and reports to detect abuse.

What is public

Your username, profile details, title, badges, points and reviews are public. Your email address, IP address and password are not, and are never shown to other members or to business owners.

Photos

Every image you upload is decoded and re-encoded on our servers before it is published. That process removes EXIF metadata, including GPS coordinates and camera details, so photographs do not quietly disclose where you were.

Cookies

We set one essential cookie to keep you signed in. It is HTTP-only, marked Secure and SameSite, and is shared across our city subdomains so that signing in once works everywhere. We do not use advertising or cross-site tracking cookies.

Who we share it with

We do not sell your data. We share the minimum necessary with the services that run the site: Mailgun (delivering account emails), Cloudflare (protecting the site from abuse, including the Turnstile check on signup and password reset), and our hosting provider. We disclose data to authorities only where legally required.

How long we keep it

Account data is kept while your account is open. Session records expire automatically. Password reset and confirmation tokens are deleted after use or expiry. Rate-limit records are discarded within a day.

Your choices

• Access and correct: your profile is editable at any time in settings.
• Close your account: also in settings. Your username and email are released, your profile is cleared, and your reviews stay up but are no longer linked to you — so the ratings they contributed to remain accurate.
• Full deletion: if you want your reviews removed as well, ask via the contact form.
• Email preferences: notification emails can be switched off in settings. Security emails are always sent.

Children

ReviewPlace is not intended for anyone under 16 and we do not knowingly collect their data.

Contact

Privacy questions and deletion requests go to our contact form.