Privacy Policy

Last updated: September 29, 2026. This policy explains how Tokenstead handles information about visitors and users.

1. Information We Collect

We collect only what is needed to operate and improve Tokenstead:

  • Account information: When you sign in via OAuth, we receive your provider ID, email address, avatar URL, and public profile name as provided by the OAuth provider.
  • Profile data you choose to share: Username, bio, X handle, website, public profile opt-in, and saved hardware configurations.
  • Machine detection data: If you use the onboarding machine detector, we read basic browser signals such as user-agent, platform, hardware concurrency, and WebGL renderer to suggest compatible hardware. This data is not stored.
  • Theme preference: Your dark/light/system preference is saved to your account if signed in, or to a cookie if you are a guest.
  • Email subscribers: Email address and source attribution for the weekly digest, collected only through the subscribe form with explicit consent.

2. How We Use Information

We use collected information to provide core features (matching models to hardware, saving rigs, displaying profiles), send the weekly digest to subscribers, improve the site, and protect against abuse. We do not sell personal data. We do not use your data to train AI models.

3. Cookies and Storage

We use a small number of cookies for session authentication, CSRF protection, theme preference, and analytics. Authentication and theme cookies are HttpOnly and set with Secure in production.

4. Third-Party Services

We use OAuth providers (GitHub, Google, X) for authentication and Resend for email delivery. These services have their own privacy policies. We do not share your data with advertisers or data brokers.

5. Your Choices

You can update or delete your profile, change your theme, and unsubscribe from the digest at any time. You can request account deletion through the contact form.

6. Data Retention

We keep account and profile data until you delete your account or ask us to remove it. Subscription and contact-form data are retained only as long as needed for the purpose they were collected.

7. Changes to This Policy

We may update this policy as features evolve. The latest version will always be posted at this URL with an updated effective date.

8. Contact

Questions about privacy can be sent through our contact form.