Privacy

This page serves as a transparent report of the data that is collected on wasteof.money.

Data Collected

  • Explicitly entered data (posts, comments, usernames, bios)
  • IP addresses (for moderation)
  • Recovery email addresses (when provided)
  • Hashed and salted passwords using industry standard bcrypt (when provided)
  • Google user IDs (when Google SSO is set up)
  • GitHub user IDs (when GitHub SSO is set up)

Analytics

For analytics purposes, wasteof.money makes use of a self hosted instance of Plausible Analytics to track privacy friendly web analytics. Information about the data tracked by Plausible can be found on their data policy. The analytics.jeffalo.net domain can be blocked in order to opt out of these analytics.

External Services

wasteof.money is self hosted in Switzerland, however it depends on the following third party services:

  • Cloudflare is used as a DNS Proxy and for its DDoS Protection (privacy, terms)
  • Google reCAPTCHA is used at signup to prevent the automation of account creation (privacy, terms)
  • Google is an OAuth provider used, with the userinfo.profile scope, to login with Google (privacy, terms)
  • GitHub is an OAuth provider used to login with GitHub (privacy, terms)

Data Deletion

Data deletion from the server can be requested via the contact email at wasteof.money/contact. In the future there may be a system to allow users to delete their own accounts automatically, but said system is not yet implemented.

Closing

Please remember that wasteof.money is currently in heavy development, and as such, there may be many changes in a short time period. Because of this, it is encouraged for users to occasionally check this document to stay aware of the data collected. As a reminder, this platform will likely remain a hobby project.