Privacy Policy

When you create an account we collect your email address, username, and password (stored as a hashed value — we never store plaintext passwords). If you choose to add a profile picture or bio, that information is stored as well.

When you interact with the platform — posting tips, following users, reacting to content — we record those actions to provide the service and compute performance statistics.

For subscription payments, all card data is handled exclusively by Stripe. We never see or store your full card number. We retain only the Stripe customer ID and subscription metadata necessary to manage your plan.

We collect standard server logs (IP address, browser type, pages visited, timestamps) for security, debugging, and abuse prevention.

To operate and improve Filt — including displaying tips, leaderboards, and profile statistics.

To send transactional emails such as email verification, password reset links, and subscription receipts. We do not send unsolicited marketing emails.

To detect and prevent fraud, abuse, and violations of our Terms of Service.

To comply with applicable legal obligations.

We do not sell your personal data. We share data only with service providers who help us run the platform:

• Stripe — payment processing and subscription management.

• Resend — transactional email delivery.

• MongoDB Atlas — database hosting.

These providers are contractually required to protect your data and use it only to perform services on our behalf.

We use a single session cookie to keep you logged in. We do not use advertising trackers or third-party analytics cookies. No cookie consent banner is displayed because we set no non-essential cookies.

Your account and its associated data are retained for as long as the account is active. If you delete your account, we remove your personal information within 30 days, except where we are required by law to retain records (e.g. payment records for tax compliance, which may be kept for up to 7 years).

Depending on your jurisdiction you may have the right to access, correct, or delete your personal data. You can update most information directly from your account Settings page.

To request account deletion or a copy of your data, email us at [email protected]. We will respond within 30 days.

All data is transmitted over TLS (HTTPS). Passwords are hashed using bcrypt. We apply rate limiting and other technical measures to protect against unauthorised access.

No system is completely secure. If you discover a security vulnerability, please report it responsibly to [email protected].

We may update this Privacy Policy from time to time. Material changes will be announced on the platform. Continued use of Filt after changes are posted constitutes acceptance of the updated policy.

For privacy-related questions or requests, contact us at [email protected].