Privacy Policy

We collect the following types of information:

Information You Provide

• Account information (username, display name, email address, hashed password)
• Profile information (bio, avatar, banner image, social links)
• Files and media you upload to cdn.weggle.xyz
• Memes and content you create on the platform
• Messages and communications you send to our support team

Automatically Collected

• IP address and approximate geographic location (city/country level)
• Browser type, version, and operating system
• Pages visited, features used, and timestamps of activity (stored in activity_logs)
• Session token (stored in our PostgreSQL database, not in a cookie)
• User-agent string

We use your information to:

• Provide, maintain, and improve Weggle.xyz services
• Authenticate you and manage your session via BetterAuth
• Serve your uploaded files through our self-hosted CDN (cdn.weggle.xyz)
• Detect and prevent abuse, spam, and security incidents (via activity_logs and IP logging)
• Send transactional emails (e.g., email verification, password reset) via SMTP
• Analyse aggregate usage patterns to improve the platform
• Respond to support enquiries

We do not use your data for advertising or sell it to third parties.

We do not sell your personal information. We may share it only in these limited circumstances:

• With our hosting infrastructure provider (server/VPS, for storage and compute)
• With email delivery services for transactional emails
• With law enforcement agencies when required by applicable law or a valid legal order
• Publicly, for content you deliberately post as public (e.g., public profile, shared files)

Your data is stored on our self-hosted infrastructure:

• Account data is stored in a PostgreSQL database with a dedicated schema
• Uploaded files are stored on our self-hosted CDN server, identified by SHA-256 hash
• Sessions are stored in the ba_sessions table and expire after 7 days of inactivity
• Passwords are never stored in plain text — they are hashed using bcrypt via BetterAuth

We implement CSRF protection, HTTPS, Content Security Policy, and automated NSFW content scanning. However, no method of transmission over the internet is 100% secure.

We use a small number of cookies:

• Session cookie (weggle.sid) — stores your session token to keep you logged in
• CSRF cookie — protects against cross-site request forgery attacks
• Maintenance bypass cookie (weggle.maintenance_bypass) — if you use a bypass key during maintenance mode

We do not use advertising or tracking cookies. See our Cookie Policy for full details.

You have the right to:

• Access the personal data we hold about you
• Rectify inaccurate information via your account settings
• Delete your account and all associated data (see our Data Deletion Policy)
• Export your data — contact us to request a copy
• Object to certain processing — contact us to discuss
• Withdraw consent at any time for consent-based processing

To exercise any of these rights, email us at support@weggle.xyz. We will respond within 30 days.

Weggle.xyz is not intended for or directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If we learn that a user under 13 has created an account, we will immediately delete the account and all associated data. If you believe a child has provided us with their information, please contact us at supex@weggle.xyz.

Our servers are hosted in the European Union. If you are accessing Weggle.xyz from outside the EU, your information may be transferred to and processed in the EU. By using our services, you consent to this transfer. We take steps to ensure your data is handled in accordance with this Privacy Policy regardless of where it is processed.

We may update this Privacy Policy from time to time. We will update the "Last Updated" date at the top of this page when we do. For significant changes, we will notify you via email or a banner in the platform. Continued use after changes constitutes acceptance.

For privacy-related questions or requests, contact us at: support@weggle.xyz

General enquiries: supex@weggle.xyz