Feedback hubs: how visitor data is processed

Founders use Socialligator to publish a public feedback board, roadmap and changelog for their product (a "hub"). This page explains what happens to your data when you visit, vote, post, comment or subscribe on one of those hubs.

1. Who is responsible

• The founder running the hub is the data controller. They decide why your data is collected and what happens to it. Their own privacy policy, when they set one, is linked from the hub's footer and forms.
• Socialligator is the data processor. We host the hub and process your data only on the founder's behalf and according to their instructions and our Terms. We do not use it for our own purposes.

2. What we process for hub visitors

• Email address and name (the name is optional), when you sign in or subscribe to updates.
• Your contributions: ideas, votes, comments and reactions, and your email preferences.
• Email delivery records: which update was sent to which address, and bounces, so nobody is emailed twice or after a hard bounce.
• A keyed hash of your IP address, scoped to the hub, used only to limit abuse (spam, vote inflation). It cannot be reversed into your IP and is erased after 30 days.
• Strictly necessary cookies that keep you signed in and remember an anonymous vote. No advertising or tracking cookies.

If the founder turned it on, the sign-in form tells you that your email and name are also added to the founder's own contact list in Socialligator.

3. Why

To run the hub you are using, to send the emails you asked for (sign-in links, updates on ideas you follow, changelog updates you subscribed to) and to protect the hub from abuse. We never sell this data, never use it for advertising and never use it to train AI models.

4. Sub-processors

• Hosting: servers and database in the European Union (Hetzner).
• Email delivery: the email provider the founder configured (for example their own SMTP server, Resend or Brevo), or the platform's SMTP service when they did not configure one.
• AI embeddings (optional): when duplicate detection is available, the title and text of ideas, and the title you type while posting one, are sent to an embedding provider to find similar ideas. Your email and name are never sent.
• Bot protection (optional): when enabled, Cloudflare Turnstile checks that forms are sent by a person.

5. Your rights

• Access and erasure: sign in on the hub and open Your data to download everything the hub holds about you or to erase it. Erasure removes your votes and keeps your ideas and comments without your name.
• Emails: every update email has one-click links to stop that kind of email or all emails from the hub.
• Anything else: contact the founder through the hub's privacy policy or website. Requests that reach us are forwarded to the founder.

6. Report abuse

To report illegal or abusive content on a hub, email abuse@socialligator.com with the hub's address. Every hub footer has a "Report abuse" link that fills this in for you.

For data about Socialligator's own customers (the founders), see our Privacy Policy.