Privacy Policy

EFFECTIVE: 1 JUNE 2026

What we collect

• Account data: username, email address, hashed password, date of birth (age verification only).
• Content: posts, messages, reactions, profile fields you choose to fill.
• Technical data: IP address, browser type, and security logs (spam and abuse prevention).
• Cookies: session and preference cookies — see the Cookie Policy.

What we do with it

Operate the forum, deliver notifications you request, enforce the Terms, and produce aggregate, non-identifying statistics. We do not sell personal data, run third-party ad trackers, or share member data with vendors.

Health-adjacent content

Posts about medication and health are public by design. Do not post anything you wouldn't want public; redact identifiers from lab reports. We never require health information to register.

Retention

Account data is kept while the account is active. On deletion, your profile is removed and posts are anonymized within 30 days; backups roll off within 90 days. Security logs are kept up to 12 months.

Your rights

You may request access, correction, export or deletion of your personal data at any time: contact@theglplounge.com. EU/UK members may also lodge complaints with a supervisory authority.

Security

Passwords are stored hashed (bcrypt), transport is TLS-only, and staff access to personal data is limited and logged.