Privacy
What BFrost stores about you, why, who else touches it, and how to get it removed. Written to be read, not skimmed past.
Last updated 25 September 2026
What we store
- Account: your name, username, email and a hashed password. If you sign in with Google, we also store your Google account ID.
- Profile: anything you add, such as a bio, university, department, profile picture and background image.
- What you do in clubs: memberships and join requests, posts, comments, reactions, poll votes, saved posts, wiki edits, event RSVPs and your answers to organisers' questions.
- Messages: direct messages you send and receive, and which conversations you have read.
- Notifications we generate for you, and your notification settings.
Cookies
We only use cookies that keep you signed in: a short-lived access token and a refresh token, both HTTP-only and sent over HTTPS. Signing in with Google also uses a temporary session cookie. We don't use advertising or tracking cookies.
Who else processes your data
- Hetzner (Germany) hosts our servers and database.
- Cloudinary stores and serves images you upload.
- Google, only if you choose to sign in with Google.
- Groq runs the AI features in club wikis. When an organiser asks for a draft or a summary, the topic or article text is sent to Groq to generate it. Nothing else is sent.
We don't sell your data or share it with advertisers.
Who can see what
Public clubs, their posts and events, and public profile details can be seen by other members. Private clubs are visible to their members. Direct messages are visible only to the people in the conversation. Club organisers see RSVP answers for their events.
Keeping and deleting
We keep your data while your account exists. When you delete your account in Settings, your profile, memberships, posts, comments, messages and RSVPs are deleted with it. Clubs you own are deleted too, so hand them over first if others rely on them.
Your rights
You can see and edit most of your data in the app. To get a copy of your data, correct something you can't edit, or ask a question, email [email protected]. If you're in the EU, you can also complain to your data protection authority.