Privacy Policy

DEPARTURES SERVICES LLC operates No Bullshit. This page describes the configured pilot’s data use.

Account and neighborhood

We use Apple sign-in and Supabase authentication to maintain an account and secure sessions. Your real name is not requested or shown to neighbors. The configured sign-in flow does not retain an email address.

Location is used to confirm a fixed neighborhood. Sampled coordinates, accuracy and sampling time are processed for that check and are not saved in the application database, logs or analytics. We retain short-lived neighborhood membership. Apple location and map services also follow your device settings and Apple’s policies.

Content and activity

We store your lines, replies, votes, reports and appeals to provide the service and review abuse. A stable nickname is specific to a neighborhood; it is pseudonymous, not a promise of complete anonymity. Other neighbors do not receive your account ID or posting coordinates.

Operational events are limited to event type, account pseudonym, neighborhood, content reference and time. They contain no line or reply body, sampled coordinates or advertising identifier. The app has no third-party behavioral advertising integration.

Retention and deletion

Ordinary content is retained for no more than 30 days. Public award display lasts no more than seven days. Device drafts are protected, excluded from backups and expire after 24 hours; publishing or signing out clears them. Expired drafts are rejected before restoration; physical cleanup resumes when the app runs.

Delete your account in Me → Settings → Delete account. Reauthenticate with Apple and confirm once. Access and public content are disabled immediately after acceptance. Account records and authentication identity are scheduled for removal within 30 days. The deletion progress view reports retries or problems rather than claiming unconfirmed completion. If Apple authorization revocation cannot be confirmed, it explains the remaining action.

Backups are limited to 30 days. A separate restricted deletion journal keeps only the identifiers and hashes needed to replay deletions for up to 60 days; a restored service stays closed until replay completes. Published anonymous counts for other authors’ past awards are not account-linked vote records.

Network and security processing

Public information pages and account deletion requests pass through Cloudflare, our network and security service provider, before they reach our service. Cloudflare processes the request content and connection metadata, such as your IP address, to deliver and protect these requests. Cloudflare’s own privacy policy applies to that processing.

Contact

Privacy questions or requests: customer_service@departures.icu.