Privacy at Yapfrom

Account records include your username, password hash, profile country, optional biography, an optional private recovery email, and session records. Preferences can include your reader language, time zone, interest countries, digest schedule, quiet hours, and email or push choices. Yapfrom also stores communities you join and thread, community, or country subscriptions with the delivery cadence you select. A replacement recovery email remains pending until its verification link is used.

If you enable browser notifications, Yapfrom stores the browser push endpoint and its public subscription key material so notifications can be delivered. Contributions include posts, comments, votes, reports, moderation actions, edit history, and the country code estimated at the time of a contribution.

Yapfrom stores a country code on a contribution, not a precise location. Hosting and security providers may temporarily process IP addresses and request logs to deliver and protect the service.

Posting-country context is an estimate derived from connection metadata supplied by the hosting edge. It can be wrong because of VPNs, proxies, mobile routing, or travel. It is not nationality, citizenship, residence, ethnicity, or verified identity. If no reliable estimate is available, Yapfrom labels the location as unknown rather than presenting profile data as connection evidence.

Data is used to operate feeds and conversations, prevent abuse, provide notifications, enforce community rules, explain geographic participation, and improve reliability. Yapfrom does not sell personal data or use posting-country context to infer protected traits.

The signed-in World Mix uses explicit choices — communities you joined and the region associated with your profile country — under the rules described on the Transparency page. Interest countries, subscriptions, and the cadence you select determine requested digests and updates. Yapfrom does not build an inferred interest profile from what you click or how long you read.

To deliver account verification, recovery messages, and email digests you enable, the configured email provider receives the destination address and message. If you enable browser push, the push service selected by your browser receives the saved endpoint and the encrypted notification payload needed for delivery.

When you explicitly request an AI translation, the selected public contribution may be sent to the configured translation provider. Do not include private or sensitive information in public posts. Translation results can be imperfect; the original remains available and authoritative.

Public contributions remain available until deleted by their author or removed under moderation. Edit history is available only while its contribution remains public and is purged when an author deletes that contribution or account. Security and moderator-only enforcement records may be retained when necessary to prevent abuse, resolve appeals, or meet legal obligations. Account settings provide recovery-email, session, password, export, and deletion controls when signed in. You can also remove subscriptions, turn off digests or push delivery, and revoke notification permission in your browser. Reports and privacy concerns can be raised through the in-product moderation flow.