Data we handle
We process your sign-in email and authentication records; public profile and contributions; private settings, signals, follows, reports, and notifications; and security records needed to rate-limit abuse. Report identities, private moderation notes, contact consent, and private messages are not public.
Why and how long
We use data to authenticate you, operate requested features, moderate abuse, secure the service, and meet legal obligations. Public contributions may be retained with the author detached after account deletion; private account data is deleted according to the documented operator matrix unless an approved legal or security hold applies. A complete retention schedule is still under review, so we do not publish invented time periods. We will update this notice when exact periods are approved and operationally enforced.
Analytics and logs
Northneed writes allowlisted server-side page-view logs for legal pages and selected public product views. Those entries are limited to an allowed event name and page context. In addition, ordinary Vercel request and log metadata may exist when requests are served, subject to provider configuration and retention.
For allowlisted public routes, Vercel Web Analytics records anonymous aggregate page views without third-party analytics cookies. Before transmission, Northneed rejects events outside the public-route allowlist and removes query strings and fragments. The site also sends only an origin-only referrer. No custom analytics events are sent. Northneed does not send user IDs, email addresses, sign-in tokens, search text, post or comment text, or other contribution content through this integration. Vercel says a page-view data point may include a timestamp, the public URL and framework route, that origin-only referrer, coarse location, browser and version, device operating system and version, device type, and analytics SDK version.
Vercel says Web Analytics does not associate page views with an individual or IP address and works without third-party cookies. It creates a request-derived visitor hash and discards that visitor hash after 24 hours. Northneed uses no advertising cookies or cross-site behavioral profiles.
Vercel Speed Insights records anonymous real-user performance measurements on the same allowlisted public routes. A data point may include the public route and path, network-speed category, browser, device type, operating system, country, Core Web Vitals measurement, relevant HTML-element attribution, SDK version, and server-received event time. Vercel says Speed Insights does not reconstruct a browsing session across pages or identify a visitor.
The visitor-hash lifespan is not the same as an approved retention period for analytics data. Dashboard reporting windows and provider retention depend on the current Vercel plan and configuration. A complete retention schedule is still under review, so Northneed does not publish an invented analytics retention period.
Processors and recovery readiness
Supabase hosts authentication and application data in Central EU (Frankfurt); Vercel hosts the application and processes Web Analytics, Speed Insights, and ordinary request or log metadata. Authorized maintainers may access data only for operations, safety, and legal obligations. Northneed currently uses the Supabase Free plan, which does not include provider-scheduled project backups, and a verified restore drill has not yet been completed. Recovery from destructive database loss may therefore be limited until a backup and restore process is implemented and tested. Independent legal review of these terms, this notice, and provider arrangements also remains pending.
Your controls
Data export
Signed-in owners can download a machine-readable copy of account data from Settings after fresh authentication checks.
Account deletion
Owners can submit an authenticated deletion request from Settings. Authored public content and necessary moderation audit history may be retained with account identity detached, so the UI does not falsely claim immediate erasure. Processing and verification remain an operator step.
Security and questions
We use access controls and narrow account-bound operations, but no online service can promise absolute security. Use the contact page or email support@northneed.com for privacy requests; do not post personal information publicly.