Privacy Notice
Draft public notice for Wheres consumer OAuth. Product and legal approval is required before production use.
Information we process
We process the information you provide to use Wheres: OAuth identity, email address, and profile information supplied by Google or X; your account and session data; and the comments, replies, photos, likes, attendance, event submissions, and profile content you choose to add.
Why we process it
We use this information to authenticate you, keep your session working, provide event and community features, moderate reported or unsafe content, prevent abuse, and operate and secure the service.
OAuth providers
Google and X authenticate you through their own authorization pages. We only request the identity, email, and profile information required for the account connection. We do not store their provider access tokens.
Sharing
We do not sell personal information. Information is disclosed only where needed to operate the service, store user-provided media, enforce moderation and security controls, or comply with applicable obligations.
Retention, deletion, and contact
Session data is retained until it expires or is ended. Account and user content are retained only as needed to provide the service, moderate and secure it, and meet applicable obligations. A production retention schedule, account-deletion process, and support contact must be approved before production launch; this draft does not invent an operator address or legal entity.