Privacy and your account

This page describes the Reblend feedback pages, run by Leonid Altman. The download service and linked stores are separate services.

What I store

I store your email address to verify sign-in, your chosen public name, account verification time, posts, comments, votes and follows. Your email is not included in public profiles or the site's APIs. A verified email does not verify a real-world identity or a paid membership.

The site uses a necessary session cookie to keep you signed in and to protect forms. Session identifiers and sign-in tokens are stored as hashes on the server. Rate-limit records use keyed hashes of IP addresses and email addresses rather than the original values. The site does not add analytics or advertising cookies.

What other people can see

Posts, comments, reproduction details and chosen names are public as soon as you post them. If your first post or comment contains a link, it waits until I've checked it. Waiting and hidden content is visible only to me. Vote totals are public; individual vote and follow records are not publicly listed. Reports and moderation records are private to me. Do not post private files, passwords or other people's personal details.

Email and other services

The configured mail service receives your email address and a sign-in link when you request one. Links expire after 15 minutes and can be used once. This site sends sign-in emails, not marketing or follow notifications. Following saves a discussion to your account.

This launch does not send your posts to an AI provider, import private inboxes or connect accounts on this site to payment providers. Links to Gumroad, SuperHive, Patreon and the download service take you to their own services and terms. The web server records each request (IP address, page, time and browser) in a log that is kept for 14 days. The feedback app itself does not log requests.

Expiry and deletion

Sessions expire after 30 days; owner sessions expire after eight hours. Signing out revokes the current session; “Sign out all sessions” revokes every session for your account. Expired sign-in tokens, sessions and rate-limit records are removed in bounded batches during requests and maintenance, not at an exact promised deletion time.

You can delete your account on the account page. This removes its email, public name, votes and follows, and revokes its sessions and outstanding sign-in links. Existing posts and comments remain attributed to “Deleted account” so discussions remain readable. A non-identifying account record remains linked to those posts. Public content, reports and moderation audit records do not have an automatic deletion schedule.

To request removal of a post or other personal information, contact contact@leonidaltman.com and include the relevant discussion or post ID. Please do not send passwords or sign-in links. The feedback database is backed up daily and the last seven backups are kept, so deleted information can remain in a backup for about a week. Account deletion does not erase third-party copies of public posts.