Plain-language
Privacy
The short version: we collect as little as we can, we never sell it, and you can delete your account anytime.
What we collect
- Your Google account ID, email, name, and profile picture — received when you sign in. We verify the token with Google; we never see your Google password.
- Anything you voluntarily add to your profile, journey notes, retreat listings, or comments.
- Technical metadata: IP address, user agent, timestamps. Used for rate limiting and abuse prevention, not tracking.
What we don't collect
- Third-party trackers or ad networks.
- Analytics that profile individuals. We use Cloudflare Web Analytics (privacy-friendly, no cookies) for aggregate stats only.
Who sees what
- Your email is never public. It's visible only to site admins for account management.
- Everything you mark "published" is public. Draft profiles, unpublished retreats, and saved items are yours alone.
- When you self-delete a comment, it's hidden immediately and permanently removed from our database 30 days later.
Deleting your account
From your dashboard settings, click "Delete account." This hides your profile immediately and anonymizes your content after a 30-day grace period (comments remain under "Removed user"). If you change your mind within those 30 days, sign in again to cancel.
Contact
For privacy questions, reach out to hello@yogatravel.org.