ThinkYet
Effective: September 12, 2026

Privacy Policy

ThinkYet only keeps the data necessary to run a healthy, civilized debate platform. We do not sell your personal data, and we do not track you across third-party websites with behavioral advertising.

Executive Summary & Highlights
  • ✓We never sell, rent, or trade your personal data to any advertisers or third-party brokers.
  • ✓Secure authentication via Google OAuth 2.0 — we never touch, store, or manage passwords.
  • ✓Privacy-first analytics with GA4 IP anonymization — zero tracking of personal identities or private post contents.
  • ✓Complete user agency — easily edit, export, or permanently delete your account and data within 30 days.

1. Core Principles & No-Tracking Pledge

At ThinkYet, privacy is not an afterthought; it is built into the bedrock of our software design. We adhere strictly to the principle of Data Minimization: we collect only what is strictly necessary to run an authentic, thoughtful discussion platform.

Our foundational commitment: ThinkYet does not sell, rent, monetize, or broker your personal information to anyone. We do not run third-party ad networks, nor do we construct behavioral dossiers to serve personalized commercial advertisements.

2. Information We Collect

Account Identity Information: When you sign in via Google OAuth, we receive your email address, display name, user handle (@username), and Google profile avatar. You can freely change your display name, username, bio, and cover image on ThinkYet at any time.

User-Generated Content (UGC): Debate questions you submit, your YES / NO stances, the accompanying written reasoning, arguments in comment threads, topics you follow, and posts you bookmark into your private saved collection.

Safety and Moderation Telemetry: Abuse and spam reports you submit (kept strictly confidential from other members), stance votes, and aggregate view counts.

Technical Data: Anonymized IP addresses, browser type, operating system, and display viewport metrics solely to ensure performant responsive rendering and defend against malicious DDoS or bot attacks.

3. How We Use Information

Powering Rational Debates: Displaying discussions, categorizing arguments under YES and NO stance tabs, computing real-time community consensus ratios, and generating live activity feeds.

Smart Notification Delivery: Informing you when community members respond to your arguments, cite your reasoning, or when topics you follow feature active new debates.

Abuse and Spam Prevention: Detecting automated spam links, multi-account ballot manipulation, coordinated harassment campaigns, or bots.

Infrastructure Reliability: Diagnosing client-side interface anomalies, optimizing page load performance, and ensuring resilient cloud operations.

4. Secure Authentication with Google OAuth 2.0

ThinkYet never requests, handles, or stores your account password. Authentication is brokered securely via Google OAuth 2.0 industry-standard protocols.

Secure session tokens (JWTs) are issued to your browser with strict cryptographic verification and auto-refresh mechanisms. When you sign out, the session is invalidated immediately.

5. Essential Cookies & Local Storage

We use only essential technical cookies and browser local storage entries:

Maintaining your active authentication session.
Remembering your theme preference (Light mode or Dark mode).
Preserving your preferred interface language (Vietnamese, English, etc.).
Caching topic-seen indicators to prevent repetitive notification dots.

ThinkYet does NOT deploy third-party advertising tracking cookies across external websites.

6. Privacy-Centric Analytics with GA4

To optimize user experience, we implement Google Analytics 4 (GA4) with maximum privacy safeguards:

IP Anonymization is permanently enabled.
Only coarse aggregate pageview counts and feature click volumes are measured.
We NEVER send Personally Identifiable Information (PII) such as email addresses, real names, search keywords, post titles, or comment bodies to analytics endpoints.

7. Data Sharing & Limited Disclosures

We share data only under strictly limited circumstances:

Public Content: Post titles, your selected stance, reasoning, and public comments are visible to the community by design.
Cloud Infrastructure Providers: Securely processed via enterprise-grade cloud hosting providers (Lovable Cloud / Supabase) under strict data protection agreements.
Legal Compliance: We disclose information only when compelled by valid, enforceable legal requests issued by competent government or judicial authorities.

8. Multi-Layer Security Architecture

ThinkYet implements Defense-in-Depth security engineering:

End-to-end transport encryption via TLS 1.3 / HTTPS across all traffic.
Granular database access restrictions using Row Level Security (RLS) — ensuring only authors can modify or delete their own posts, comments, and profile data.
Strict Role-Based Access Control (RBAC) and immutable administrative audit logs for moderation actions.

9. Your Privacy Rights & Controls

You retain complete agency over your footprint on ThinkYet:

Edit Profile: Update your public display information, avatar, and followed topics at any time.
Delete Content: Delete your posts, stances, and comments instantly from public view.
Export Data: Request a structured export of your activity archive.
Account Deletion: Request permanent removal of your account and all associated personal identifiers.

10. Data Retention & Account Deletion Workflow

Your public discussions remain accessible while your account is active to preserve collective conversational context.

Upon submitting an account deletion request, all personal identifiers (email, name, OAuth bindings) are permanently deleted or irreversibly anonymized from production databases within 30 days.

11. Policy Changes & Privacy Contact

We may periodically update this policy to reflect evolving product capabilities or legal standards. Substantive revisions will be announced clearly within the app.

For inquiries or data privacy requests, contact our Data Privacy team at: privacy@thinkyet.com or submit an inquiry through our Help Center.