Privacy Policy

Effective Date: 9/18/2026

This Privacy Policy explains how MyndBBS ("we", "our", or "us") collects, uses, shares, and protects your personal information. We are committed to complying with applicable data protection laws, including the European Union's General Data Protection Regulation (GDPR) and the Personal Information Protection Law of the People's Republic of China (PIPL).

1. Information We Collect

We may collect the following types of information when you use our Service:

• Account Information: Username, email address, passwords, and Passkeys (WebAuthn credentials).
• Profile Information: Bios, avatars, and other optional profile details.
• User-Generated Content: Posts, comments, messages, and upvotes.
• Technical Data: IP addresses, browser types, device information, and Cookies (see our Cookie Consent Modal for detailed preferences).

2. Lawful Basis and Purpose of Processing (GDPR & PIPL)

We process your personal data under the following lawful bases:

• Consent: Where you have provided explicit consent (e.g., for analytics and marketing cookies, or processing sensitive personal information under PIPL).
• Contractual Necessity: To provide you with the Service, create your account, and enable platform features.
• Legitimate Interests: To maintain the security of our platform, prevent fraud, and improve our services.
• Legal Obligation: To comply with applicable laws and regulations.

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service Providers: Third-party vendors who assist us with hosting, database management, and analytics (subject to strict data processing agreements).
• Legal Authorities: When required by law, subpoena, or other legal processes.

4. Cross-Border Data Transfers

Your data may be stored and processed in countries other than your own.

• For EU Users (GDPR): We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.
• For Chinese Users (PIPL): We will obtain your separate explicit consent before transferring your personal information overseas and will conduct necessary security assessments as required by the Cyberspace Administration of China (CAC).

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. If you delete your account, your personal data will be anonymized or securely deleted within a reasonable timeframe.

6. Your Data Subject Rights

Under both GDPR and PIPL, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data.
• Right to Withdraw Consent: You can withdraw your consent at any time (e.g., via the Cookie Preferences menu).
• Right to Data Portability (GDPR): You can request your data in a structured, commonly used, and machine-readable format.
• Right to Restrict or Object to Processing: You can object to certain types of processing, such as direct marketing.
• Right to Explanation (PIPL): You have the right to request an explanation of our personal information handling rules and automated decision-making.

To exercise these rights, please contact us or use the account settings provided in the platform.

7. Protection of Minors

Our Service is not directed to children under the age of 14 (or 16 in certain EU member states). We do not knowingly collect personal information from children without verifiable parental consent. If we learn that we have collected such information without parental consent, we will delete it promptly. Under PIPL, the personal information of minors under 14 is considered sensitive personal information.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

9. Contact Us

If you have any questions or concerns about this Privacy Policy, or wish to exercise your data subject rights, please contact our Data Protection Officer (DPO) / Personal Information Protection Officer at: privacy@myndbbs.example.com.