Thesis Street

Draft for legal review · version 2026-10-draft. This text has not yet been reviewed by a lawyer; bracketed placeholders will be completed before public launch.

Privacy Policy

We collect as little as we need to run a pseudonymous publishing community. We do not sell your data. You can ask us to delete your account at any time.

1. Who is responsible

The controller of your personal data is [Operator legal name and registered address — to be completed]. For any privacy question or request write to contact@thesisstreet.com[data protection contact — to be confirmed].

2. What we collect

  • Account data: email address, a securely hashed password, the invite code you used and who invited you, and when you accepted these policies (and which version).
  • Profile data: handle, display name, optional bio and avatar. These are public.
  • Content: drafts (private), published theses and calls, comments, likes, reposts, follows and bookmarks.
  • Safety data: reports you send or receive, moderation decisions and an audit log of admin actions.
  • Technical data: session tokens and the server logs our hosting providers keep for security and reliability.

3. Why we use it and on what legal basis

  • To provide the service and your account (performance of a contract, Art. 6(1)(b) GDPR).
  • To keep the community safe, prevent market manipulation and abuse, and keep track records honest (legitimate interests, Art. 6(1)(f) GDPR).
  • To comply with legal obligations, for example responding to lawful requests (Art. 6(1)(c) GDPR).
  • We do not use your data for advertising and we do not sell it.

4. Who we share it with

We use processors to run the service: our database and backend host (Convex), our web hosting (Cloudflare) and our market data provider, Marketstack (which receives tickers, never personal data). Charts are drawn from that data on our own servers and load nothing from third parties. [List of processors and their locations, including any transfers outside the EEA and the safeguards used — to be completed.]

5. How long we keep it

We keep account data for as long as your account exists. Drafts are deleted when you delete them. When an account deletion request is approved, we remove your email, credentials, sessions, profile details, drafts, bookmarks and follows. Published calls stay on the record in anonymized form (shown as “Deleted user”), because the integrity of track records depends on it. Moderation records are kept as long as needed to protect the community and meet legal obligations.

6. Your rights

You have the right to access, correct, delete, restrict or object to the processing of your data, and to data portability. You can request deletion of a thesis or your whole account from your account page; other requests go to contact@thesisstreet.com. You can also complain to your local data protection authority.

7. Security and cookies

Passwords are stored hashed and connections are encrypted. We use only the storage strictly necessary to keep you signed in and remember your theme; we do not use tracking or advertising cookies.

8. Changes

We will post changes here and, for material changes, tell you in the product.

Questions: contact@thesisstreet.com