Privacy & Data Retention

Last updated: May 26, 2026

This page explains what data mana-software.dev (“Mana Engine,” “we”) collects, why, how long we keep it, and the choices you have. We aim to collect as little as possible. This is a small project site in pre-alpha; if anything here is unclear, contact us at privacy@mana-software.dev.

What we collect

  • Account info. When you register, we store your display name, email address, and (if you sign in with Google, GitHub, or Discord) the basic profile and avatar that provider returns. We never receive your password for those providers.
  • Profile content. Your handle, bio, avatar image, and notification preference — all of which you control and can edit.
  • Content you post. Blog comments and replies you submit, along with their timestamps.
  • Limited technical data. Your IP address is sent to Cloudflare Turnstile (anti-bot) and used transiently for comment rate-limiting. We don't build advertising profiles and we don't use third-party analytics or tracking cookies.

Cookies we use

  • Session cookie — keeps you signed in. Required for login to work.
  • Anti-bot verification cookie — after you clear a Turnstile challenge once, a short-lived signed cookie (about 12 hours) lets you comment again without repeating the challenge.

We do not use advertising or cross-site tracking cookies.

Third parties

We share data only with the services that make the site work:

  • Cloudflare — hosting, database (D1), file storage (R2), and Turnstile bot protection.
  • Google, GitHub, Discord — only if you choose to sign in with them, for authentication.
  • Resend — to deliver notification emails you've opted into. We send your email address and the message content.

Email notifications

We only email you if you opt in (at signup, on the pre-alpha page, or in your profile). Every notification email includes a one-click unsubscribe link, and you can toggle notifications off anytime from your profile.

Data retention

  • Account & profile data is kept while your account exists.
  • When you delete your account (from your profile, or if an administrator removes it), we anonymize your user record — your name becomes “[deleted]”, and your email, avatar, and bio are cleared. Your posts and comments remain but are attributed to the anonymized account so existing discussion threads stay readable. Your authentication credentials and active sessions are deleted immediately, signing you out everywhere.
  • Comment rate-limit counters are transient and overwritten continuously.
  • Email logs held by Resend follow their retention policy.

If you'd like your posts or comments fully removed (not just anonymized), email privacy@mana-software.dev and we'll handle it.

Your choices

  • Edit your profile and notification preferences anytime.
  • Unsubscribe from emails via any email's link or your profile.
  • Delete your account from your profile's “Danger zone.”
  • Disconnect linked sign-in providers from your profile.

Children

Mana Engine is aimed at developers, students, and hobbyists. It isn't directed at children under 13, and we don't knowingly collect their data. If you believe a child has given us personal information, contact us and we'll remove it.

Changes

We may update this policy as the site grows. Material changes will be reflected by the “last updated” date above.