Privacy Policy
Last updated: September 2026
What we collect
We collect your school email (for verification only), a hashed password, your campus and program, and the content you post. Your school email is never shown publicly and is never linked to your posts in any way visible to other users.
Anonymity
Your posts appear under your ghost identity, not your real name or email. Internally, posts are linked to your account so we can enforce our Community Guidelines and respond to legal requests, but this link is never exposed to other users.
Payments & banking
Payments are processed by Paystack. We do not store your card or mobile money details — Paystack handles that directly and shares only transaction status with us. If you request a payout (Prime users only), we store your bank/MoMo account name, number, and code solely to process the transfer via Paystack. This data is encrypted at rest and deleted after the payout is paid.
Push notifications
If you enable push notifications, we store a device token (FCM token or Web Push subscription) linked to your account to deliver notifications. You can disable this at any time in your device settings or by logging out.
AI content processing
Uploaded images are scanned by OpenRouter (using Anthropic Claude) for nudity, graphic violence, and CSAM before posting. Reported content may also be reviewed by the same AI. No human at Yard or OpenRouter views your images unless a report escalates to admin review.
Image storage
Images are hosted by UploadThing. We track your storage usage against your quota (50 MB default, upgradable). Unposted uploads are kept for 7 days then auto-deleted.
Cookies
We use two httpOnly cookies: yard_token (30-day session) and yard_seen_welcome (1-year preference). No third-party analytics or tracking cookies are set.
Data retention
We retain account and post data for as long as your account is active. You can delete your account from the Lair page (requires password confirmation). Deletion removes all your posts, votes, comments, earnings, uploads, and device tokens immediately.
Public profile scope
Your ghost ID, avatar emoji, campus, tier badge, streak, post count, and follower/following counts are visible to other users. Your email, password, program, level, earnings, storage, and payout details are never public.
Third parties
We use Resend (email delivery), UploadThing (image storage), Paystack (payments), OpenRouter (AI moderation), and Vercel/Neon (hosting and database). Each processes only the data necessary for their function.
Contact
Questions about your data? Reach us at the email listed on our Terms page.