How your data is used

Your account: your email address, a private account name, and your password, which is stored only in hashed form by our sign-in provider.

If you asked to hear when Wendle opens: that choice is kept with your account, and we email you once, through Resend, when Wendle opens. You can turn it off in Settings until then, and the email has an unsubscribe link. We send nothing else to that list.

Your identities: in each community you join you choose a display name; Wendle adds a number to tell people with the same name apart. Nothing public links your identities to each other or to your account. Reusing a name or sharing personal details in posts can still connect them.

What you write and do: your posts and comments, your reactions, and reports or appeals you file. Your individual reactions and your experience level in a community are private to you.

Everyone can read published posts and comments and the community identity that wrote them. Reactions appear only as a short label such as “Informative”, and only once at least three readers have answered, so one person's reaction can't be picked out.

The reviewers of a community can see content that has been reported or flagged for review. Reviewers are members appointed by identity, and the list of them is public. If an account is suspended or banned, the reason written by the administrator is kept with the account and is not shown to other members.

The people who run Wendle can read the database, as anyone who runs a service can. No page on Wendle shows one member's private details to another.

Text. Before a comment or post appears, its text and the community's published rules are sent to Anthropic, which runs the AI model that checks it against those rules. Your name, email and account are not sent. The check can only flag something for a human reviewer to look at. It never removes anything, and it does not judge opinions or tone. If the check is unavailable, your text stays private until it can run.

Photos. Photo posts are switched off right now. If they are switched on, a photo is re-saved without its location and camera data, and that copy is sent to Amazon Web Services (Rekognition) to detect content the community does not allow. We have told AWS not to keep it or use it to improve its services. No person looks at photos as part of this. Your original file is kept privately only while it is checked, then deleted, and only the clean copy is ever shown.

What the checks cost. Wendle keeps a private tally of what your own checks have cost, which only you can see, under Settings. Nothing on Wendle uses it to treat you differently.

Wendle sets only the cookies that keep you signed in. It has no advertising, analytics or tracking scripts.

• Supabase: our database, sign-in and file storage.
• Vercel: hosting. Like any web host, it and Supabase keep ordinary server logs, including IP addresses.
• Anthropic: the AI text check described above.
• Resend: sends your confirmation and password-reset emails, and the opening-day email if you asked for it. It receives your email address and the message.
• Cloudflare Email Routing: forwards messages you send to our contact address.

You can change your display name in each community at any time. In Settings you can download a file of your data, or delete your account, which removes your posts, comments, reactions, identities and any photos. Some short event records that hold no content, such as that a report was handled, may remain for safety and record-keeping. Reviewers, and accounts that are suspended, can ask us to delete their account instead.

To ask about your data, write to hello@joinwendle.com.