Privacy Policy
What personal data Tessero.org collects, why, and your choices.
Last updated 2026
DRAFT: requires legal review before launch. This document is a working draft generated for review. It is not legal advice and is not final.
Who we are
Tessero.org is the community website for the Tessero project. The data controller is [TBD: controller entity, depends on the copyright/fiscal-host decision]. Contact: [email protected].
Data we collect
- Account data: name, email address, and the authentication method you use (password and/or linked GitHub, Google or X accounts, including the provider’s user id).
- Participation data: showcase submissions, feature requests and votes, event RSVPs, and notification preferences, where you choose to use those features.
- Donations: processed by Stripe. We never see or store your card details. We retain the amount, currency, date, Stripe reference, and your display/anonymity choices.
- Contact messages: the category, your message, and the email you provide.
- Technical data: minimal server logs for security and reliability. Privacy-friendly, cookieless analytics are off by default and, if enabled, do not track individuals.
Why we use it
To operate your account and community participation, to process and acknowledge donations, to respond to contact messages, to keep the site secure, and to send only the communications you opt into.
Cookies
We use essential cookies for sessions and security (CSRF). We show a cookie banner only if non-essential cookies are ever enabled.
Retention
Account data is kept while your account is active. On deletion we soft-delete and then hard-delete on a schedule; donation records are retained only as legally required and de-identified where possible. [TBD: retention periods, set with counsel.]
Your rights
You can export your data (JSON) and delete your account from your account settings. Depending on where you live you may have rights to access, correct, or object to processing; contact us to exercise them.
Age
The site is not intended for children under 16. [TBD: minimum age, set per counsel.]
Third parties
We rely on Stripe (payments), our email provider, and the OAuth providers you choose to link (GitHub, Google, X, Discord). Each processes data under its own terms.