Privacy

Draft — requires review by a qualified adviser before launch. This states our intended practice. It has not been reviewed by a solicitor, and UK GDPR compliance should be confirmed independently before the site goes live.

What we collect

• Account data — email, display name, username and chosen profile icon.
• Content you post — comments, replies and discussions.
• Activity — what you save and follow, so your feed reflects it.
• Analytics — aggregated page and video statistics, and, if you accept cookies, anonymised recordings of how pages are used.
• Technical — IP address and browser, for security and abuse prevention.

We do not collect a profile photograph, because we do not accept uploads of them. Members choose from our icon library instead.

Why

To run your account, show you what you asked to follow, keep the community usable, and understand which parts of the site are worth continuing. We do not sell personal data, and there is no advertising network embedded in the site.

Third parties

We use hosting, database, media, email and analytics providers to operate the service, and an ecommerce provider for the shop. Embedded video is served by YouTube through its no-cookie player, which defers its cookies until you press play.

Our analytics providers are Google Analytics, which counts visits, and Microsoft Clarity, which records how pages are used and can replay a session. Clarity masks text content by default, so what you type is not captured. Neither loads unless you accept cookies, and you can withdraw that at any time on the cookies page.

Your rights

• Access a copy of your data.
• Correct anything inaccurate.
• Delete your account, and your comments with it if you choose.
• Object to processing, or withdraw consent.

Contact privacy@abovetopsecret.co.uk. You may also complain to the Information Commissioner’s Office.