Privacy, plainly.

The short version

• Your wall is yours. You choose public, unlisted or private, and can change it any time.
• We only read public data from the links you add (App Store, GitHub, Figma…). We never ask for store-console or repo access.
• Recruiter visibility is off until you opt in.
• No ads, no selling data, no raw IP addresses in analytics.
• Export everything or delete your account from Settings → Privacy & data, instantly.

What we collect

• Account: email, name, password hash (or your GitHub login and avatar if you sign in with GitHub).
• Profile: what you enter — handle, headline, bio, location, time zone, skills, links, website, X handle, avatar.
• Linked work: public metadata fetched from the URLs you add, stored as snapshots so your wall renders when a source is down. It is shown as “linked, not verified”.
• Activity: follows, likes, posts, reposts and your interests, to build your feed and digest.
• View analytics: a salted, daily-rotating hash of IP + user agent (never the IP itself), referrer and country, so you can see how many people viewed your wall or resume.

Why (legal basis)

• Contract — to run your profile, feed and job matching.
• Consent — recruiter visibility, the weekly digest, and search-engine indexing. Each is a separate toggle you can withdraw at any time.
• Legitimate interest — security, abuse prevention, and the report-and-takedown flow.

Who sees it

• Public walls are visible to everyone and may be listed in Explore and indexed (unless you turn indexing off).
• Unlisted walls are reachable only by direct link and are never listed or indexed.
• Private walls are visible only to you.
• Companies see your profile in search only if you opt in to recruiter visibility. They never see your email.
• Processors: Cloudflare (hosting, database, storage) and our email provider. Data may be processed outside your country under standard contractual clauses.

Your rights (GDPR & APPI)

• Access & portability — download a JSON export of everything tied to your account.
• Rectification — edit any field in Settings.
• Erasure — delete your account; your profile, links, resume, posts, follows, analytics and uploaded media are removed.
• Objection / withdrawal — switch off recruiter visibility, indexing or the digest at any time.
• Under Japan’s APPI you may request disclosure, correction, suspension of use, or deletion of retained personal data; the same tools above fulfil these requests.
• You can complain to your local data protection authority (in Japan, the Personal Information Protection Commission).

Retention

We keep your data while your account exists. View analytics are kept for up to 13 months. When you delete your account, data is removed from the live database immediately and from backups within 30 days.

Contact

Questions or requests: privacy@shipmosaic.com. We reply within 30 days.