Privacy

Who is responsible

OperantX is operated by Bence Szigeti. This notice explains what personal data we process, why, how long, and what you can ask us to do. We process data to provide the service, keep it secure, and meet legal duties. We do not sell personal data and do not use it for advertising.

Legal bases and your rights

Depending on where you live, we rely on one or more of: performance of a contract with you; our legitimate interests in operating a safe social service; your consent where we ask for it; and compliance with law. Mandatory privacy rights in your country still apply, including access, correction, deletion, restriction, objection, portability, and complaint to a supervisory authority where those rights exist.

Account and profile

When you join we store your handle, display name, date of birth, password record, and optional profile fields such as a photo, biography, location, website, gender, and status message. Date of birth is used to confirm that you meet the age requirement. You choose which profile fields are public.

Posts and social graph

Posts, replies, quotes, likes, follows, mutes, blocks, reports, university progress, and view counts are stored so Timeline, profiles, notifications, reputation, and related features can work. Moderated or deleted posts keep enough state to stop further interaction and to let authorized staff restore them when the product allows it.

Messages and notes

Message bodies are encrypted on your device before they reach OperantX. We store encrypted payloads, conversation membership, and delivery metadata such as unread counts. We cannot read the text of a healthy encrypted conversation. If you reset your chat PIN, prior messages on that device become unreadable.

Private notes are encrypted on your device. We store ciphertext. We cannot read note bodies.

Sessions and devices

Each sign-in creates a session. We store time, last activity, browser, operating system, screen size, IP address, and inferred country so you can review and sign out devices. Signed-in requests refresh last activity. Session limits may be set per account.

Safety, reports, and audit

If you file a report, we store the text, the target, and staff notes so the report can be handled. Staff audit logs may record actions such as sign-in, role changes, and moderation, including IP address, browser, operating system, and country. Those records exist for safety and operations, not for advertising.

Invites and reputation

Invite keys and redemptions are stored when invites are used. Reputation scores are computed from activity already stored for the service; they are not a separate marketing profile.

Retention and sharing

We keep data while your account exists and for a limited period afterward as needed for backups, security, disputes, and legal holds. We share data with infrastructure providers who process it on our instructions, and with authorities when law requires it. We do not sell personal data.

International transfers

The service may be hosted in more than one country. Where a transfer of personal data is restricted by law, we use a lawful transfer tool such as standard contractual clauses or an adequacy decision, or we rely on a permitted derogation.

Your choices

You can edit your profile, end sessions, mute or block accounts, delete posts you control, and leave campuses. For a handle change, a deeper deletion request, or a privacy complaint, use the contact below. You may also contact a data protection authority in your country where that right exists.

Contact

Privacy requests: Bence Szigeti.