Privacy policy
Short version: no accounts, no ads, no selling data. We keep the minimum needed to stop spam and count votes fairly.
Last updated October 16, 2026. Controller: KraftStories LLC, 93 Pearl St, 4th Floor, New York, NY 10004, USA.
When you browse
We use Google Analytics 4 to understand which pages are useful (pages viewed, approximate location at city level, device type, and clicks to official sites). IP anonymisation is on. Google Analytics sets first-party cookies for this. You can block it with any content blocker or Google’s opt-out add-on, and the site works the same.
When you vote or contribute
- We store what you submit: your vote, tip, fact suggestion or photo, and the optional name you give for credit.
- We store a one-way hash of your IP address, not the address itself, to enforce one vote per place and to rate-limit spam.
- If you verify a visit with your location, it is used once to check you’re near the place and is not stored. For photos, we keep the date taken and whether it was verified.
- Photos are published publicly as uploaded. Please don’t upload photos showing identifiable people without their consent.
- A bot check (Cloudflare Turnstile) may run when you upload.
Who we share it with
Our service providers only: Vercel (hosting and photo storage), Neon (database), Google (analytics) and Cloudflare (bot checks). We don’t sell or rent personal data and there is no advertising on this site.
How long we keep it
Contributions stay up while they’re useful. Rate-limit records are short-lived. Analytics data follows Google Analytics’ retention setting (14 months).
Your rights
You can ask us to delete a contribution or tell you what we hold. Email hello@kraftstories.com with the page and roughly when you posted. Depending on where you live (for example the EU, UK or California), you have rights to access, correct and delete your data and to complain to a regulator.