Privacy Policy

1. Scope

This Privacy Policy explains what information ClickThis.fyi collects, how it is used, when it may be shared, and the choices available to you when you use the service.

2. Information we collect

Discord account information

When you sign in, ClickThis.fyi requests Discord’s basic identify permission. We receive your Discord user ID, username, display name when available, and avatar information. We do not ask for your Discord password.

Profile information and content

We store the information you choose to add to your profile, including your profile URL name, display name, bio, links, appearance settings, uploaded background images, uploaded music, and the displayed name of an uploaded music file. We also store your About Me text, mood and status, friend requests and accepted friendships, ordered Top 5, timeline posts and activity, and comments you leave on profiles.

Authentication and security data

We create a random session token after sign-in and store only a cryptographic hash of that token in the database. We also use short-lived OAuth state values to protect the Discord sign-in flow. Discord OAuth access tokens are used only to complete sign-in and are not persisted by ClickThis.fyi.

Connection and request data

IP addresses are processed for rate limiting and security. Standard request information, such as IP address, browser or user-agent information, request path, timestamps, response status, and similar technical data, may also be recorded by the web server, reverse proxy, hosting provider, or security infrastructure.

3. How we use information

We use information to authenticate users, create and display profiles, save profile settings and media, provide requested features, prevent abuse, apply rate limits, secure and troubleshoot the service, respond to support or privacy requests, and comply with legal obligations.

4. Public profile information

Your public ClickThis.fyi profile is designed to be shared. Your display name, chosen profile URL, bio, links, avatar, background, music, About Me, mood, status, accepted friends, Top 5, timeline posts and activity, profile comments, view totals, and related appearance choices may be visible to anyone who visits your profile. Do not publish information you do not want to make public.

5. Cookies and local authentication

ClickThis.fyi uses essential cookies for sign-in and session security. The session cookie is HTTP-only and is used to keep you signed in. A short-lived OAuth cookie is used during Discord authentication. A random visitor cookie is used to count a browser’s profile visit at most once per 24 hours. Only its hash is stored with a profile identifier and expiry; profile owners’ signed-in visits are excluded. These counts are approximate and are not a list of identified visitors. The current application does not use advertising cookies or third-party analytics cookies.

6. How information is shared

We may share or make information available in the following limited situations:

• Public profiles: information you choose to publish is available to profile visitors.
• Discord: authentication requests are exchanged with Discord to sign you in.
• Infrastructure providers: hosting, network, database, or security providers may process technical or stored data as needed to operate the service on our behalf.
• Legal and safety reasons: information may be disclosed when reasonably necessary to comply with law, respond to valid legal process, investigate abuse or security incidents, or protect rights and safety.
• Business changes: information may be transferred as part of a merger, acquisition, restructuring, or transfer of the service, subject to applicable law.

ClickThis.fyi does not sell your personal information and does not use your profile information for third-party targeted advertising.

7. Data retention

OAuth state records are short-lived and are currently valid for about 10 minutes. Session records expire automatically; the current default session duration is 7 days and deployments may configure a shorter or longer period within the application’s supported limits. Profile information and uploaded media are generally retained while your profile remains active or until the content is removed. Operational and security logs may be retained for a reasonable period based on security, troubleshooting, and infrastructure needs.

We may retain limited information longer when required for legal compliance, fraud or abuse prevention, dispute resolution, or security.

8. Your choices and privacy requests

You can edit your profile information and remove uploaded media through the profile editor. You can remove your posts and comments, remove comments on your own profile, cancel or decline friend requests, remove friends, and update your Top 5. Previously recorded activity can be removed from your own timeline. You may also request access to, correction of, or deletion of personal information associated with your profile by emailing [email protected]. We may need to verify that you control the relevant account before completing a request.

Depending on where you live, applicable law may provide additional privacy rights. We will respond to valid requests as required by applicable law.

9. Security

We use technical and organizational safeguards intended to protect account and profile data, including HTTPS in production, HTTP-only session cookies, hashed session records, restricted OAuth permissions, request validation, and access controls. No online service can guarantee absolute security.

10. Children and minimum age

ClickThis.fyi is not intended for children under 13. Because sign-in requires Discord, you must also meet Discord’s minimum age requirement for your country. If we learn that information was collected from a person who does not meet the applicable minimum age, we may delete the related profile and data. A parent or legal guardian can contact [email protected] with a privacy concern.

11. Third-party links

User profiles may link to third-party websites and services. Their privacy practices are controlled by those third parties, not ClickThis.fyi. Review their policies before providing information to them.

12. Changes to this policy

We may update this policy when the service, data practices, or legal requirements change. The effective date at the top of this page will be updated when a revised policy is published. We will provide additional notice when required by law.

13. Privacy contact

For privacy questions or requests, email [email protected]. For general support or abuse reports, email [email protected].