Privacy Notice

At a glance

You can create an account without an email address or phone number. Comments are public and appear under your username. You don’t have to use your real name, but we can’t guarantee anonymity.

Your account and device

We keep an ID for your account, your public username and the records needed to verify your sign-in key. We also record the versions of the Terms of Service and Privacy Notice in effect when you create your account. The key itself is not stored in our account database.

We use cookies and storage on your device to keep you signed in, remember your preferences and save comment drafts. We don’t use cookies for advertising or behavioral tracking.

When you have visible public comments, your author card shows your approximate account age, your current public comment count and karma. The public author summary does not include your exact account creation date or time. A green username means the account was under seven days old when that comment was posted; this historical marker stays with the comment. We store each lak’s qualified weight using the voter’s age when it was given and the applicable voting rules. Every account starts with 1 karma. Global karma adds karma earned from qualified laks on public comments to that starting point; site karma includes only contributions earned on that site. Karma does not verify identity or factual accuracy.

Pages and comments

The extension finds comments using an identifier derived from the page or site address. Automatic comment-count checks do not send the full page address or your sign-in cookie. We don’t collect text from the pages you visit or what you enter in forms on those pages.

To publish a new discussion, we store your comment and the page address, along with the page title if it’s available. The address and title may be shown publicly with your comment. When you post a reply, the page address and title are not sent again. Pages that have never received comments are not added to our database.

Laks, blocks and reports

Giving a lak means liking a comment. Everyone can see how many laks a comment has, but we don’t publish who gave them. Your block list, reports, report notes and our moderation records are not public.

When a comment is reported, we keep a copy of its text and any associated page title as they were at the time. That copy may remain even if the comment is later edited or deleted.

Service providers and IP addresses

laklak runs on Cloudflare, which handles hosting and security. Cloudflare processes IP addresses and technical request details to run and protect the service. When you publish a comment or reply, or change its text, we store the Cloudflare-provided request IP in encrypted form, together with internal account and comment identifiers, the action and its time. These records help us address abuse and respond to lawful requests. They do not contain comment text or its edit history, and do not identify a person's physical location.

Turnstile uses information about your browser and connection to run security checks and improve bot detection. You can read more in Cloudflare’s Turnstile Privacy Addendum.

We use Google Workspace to receive and reply to email. If you write to us, it processes your email address and message. You can’t use your email address to sign in to laklak or recover access.

These providers may process your information in other countries.

Why we use your information

We use account and comment information to provide laklak under our agreement with you. To keep the service secure and deal with abuse, we rely on legitimate interests. We also process information when we need to meet a legal obligation.

We don’t sell your data or use it for targeted advertising. We review legal requests for information and disclose only what we’re legally required to share.

Keeping and deleting information

We keep your account details while your account is active. Deleting your account removes your sign-in records, sessions and laks. Your comments remain, with “deleted user” in place of your username. Delete any comments you don’t want to keep before deleting your account.

An internal record linking your earlier comments to the same account may remain so blocks still work and we can deal with abuse. Reports and moderation records are not automatically deleted with your account. Your former usernames cannot be used again.

Comment-action IP records are retained for two calendar years from each action, even if the comment or account is deleted. Expired records are removed by scheduled cleanup, so deletion may be delayed by processing backlogs or failures. Cloudflare recovery backups may retain deleted data temporarily. Deleting your account does not remove copies other people have saved.

Your choices and rights

You can change your username or delete your account in Settings on laklak.io. For questions about your data, or to request access, correction or deletion, email privacy@laklak.io.

Depending on the law that applies, you may also have the right to object to or restrict processing, get a copy of your data or complain to a data protection authority. We may ask for information to verify your request. Never send us your sign-in key.

Chrome Web Store

When we use or share information from Chrome APIs, we follow the Chrome Web Store User Data Policy, including its Limited Use requirements.