Draft privacy posture before any real intake.
This is a local pre-publication draft only. It does not authorize collecting real creator data, activating external analytics, using external providers with real data, publishing real profiles or processing payments. Final public privacy policy needs review and Diogo approval before production use.
1. Current MVP mode
The current YourHoe MVP is a local static prototype. It uses demo profiles and local browser event storage only. No external analytics provider, real intake backend, payment provider or production database is active.
2. Data intended for creator submissions
If real submissions are later approved, the MVP should collect only the minimum needed to review and list a profile:
- public handle/name;
- creator contact email or approved contact route;
- external profile links;
- short non-explicit bio and tags;
- non-explicit teaser material and rights confirmation;
- 18+, authorization, rights, manual-review and takedown confirmations.
3. Data not intended for MVP collection
The MVP should not collect identity documents, payment details, explicit media, sensitive private identifiers, unnecessary location data or unrelated personal data unless a separate secure process, policy update and approval exist.
4. Local analytics posture
The prototype stores basic click events in the visitor's browser under yourhoe_mvp_events. These events are local-only and are intended for manual export/testing. They must not include email, identity documents, explicit content, payment data or sensitive identifiers.
5. External providers
External analytics, form tools, payment providers, hosting surfaces or databases that receive real data require provider review for adult use, privacy posture and Diogo approval before activation.
6. Rights and requests
Creators or affected people should be able to request correction, pause, removal or deletion of submitted/listed profile data. Plausible safety/legal reports should be prioritized over growth or monetization.
7. Retention draft
Operational records should be kept only as long as needed for review, safety, fraud prevention, takedown handling or legal obligations. Rejected or removed profiles should not stay public.
8. Contact
Use the draft takedown/report process at takedown.html. The current mailto address is a placeholder until an approved operational process exists.