Legal
Privacy Policy
Last updated September 11, 2026 · This is a plain-English policy, not legal advice.
Plain-English summary first: sweetmelon is run by one person in California. We collect the minimum needed to run a forum, we don't sell it, we don't run ads, and you can delete your account yourself.
What we collect
Your email address, or the basics from your Google account (name, email, profile picture) if you sign in with Google. The profile you fill in — what you do, your role, and optionally your industry, company and GitHub username. What you post, comment and vote on. Anything you send us through the report form.
Screenshots you upload are public: anyone with the link can view them, so don't upload anything confidential.
We also keep aggregate page-view analytics that don't use cookies and can't identify you.
Cookies
Who else touches your data
A few services run the site for us. Each one only sees what it needs to do its job:
- Supabase — hosts the database and handles sign-in. Servers are in the United States (US East).
- Vercel — hosts the website and provides the cookieless analytics above. Its analytics identify a visit by a hash of your IP address and browser that is discarded within 24 hours.
- Cloudflare Turnstile — checks that sign-ins and reports come from a person, not a bot. It looks at browser signals to do that and doesn't use cookies. Details in the Turnstile privacy addendum.
- Google — only if you choose “Sign in with Google”. We receive your name, email and profile picture, and nothing else from your Google account.
- Resend — sends the sign-in link and account emails.
- OpenAI — screens posts, comments and screenshots for content that breaks the rules. It sees the text and image you submit, nothing about who you are. Details in the OpenAI privacy policy.
None of them get your data for advertising, and none of them track you across other websites on our behalf.
What we don't do
Your content
Seeing, changing and deleting your data
Everything on your profile can be edited in Settings. Posts and comments can be edited or deleted from the post itself.
Settings → Delete account removes your login and profile immediately. Your posts and comments stay up, attributed to [deleted], unless you delete them first. If something isn't covered by those controls, email us and we'll do it by hand.