Privacy information

Cloudflare staging notice — not the production privacy policy. This noindex staging environment is used to test the independent OGU SOCIAL application. Its practices may differ from ogusocial.com.

Information processed by the staging application

• Iris accounts: username, display name, email address, password verifier (not a plaintext password), account and verification state, profile fields, and account timestamps.
• Authentication and security: server-side session and API-token records, hashed session/CSRF/token values, short-lived sign-in and verification records, and security audit events. Cloudflare receives network requests and associated connection information; the application uses the request IP supplied by Cloudflare as an input to rate limiting and stores a hash of that rate-limit key.
• Profiles and community: display name, avatar reference, optional Telegram and Instagram handles with separate public-display choices, and user-submitted discussion, comment, reply, and report content.
• Marketplace staging: seller-submitted listing details, including platform, handle, listing type, price, description, seller display name, and Telegram contact destination, associated server-side with the signed-in OGU profile. Existing catalog data is served from the configured Marketplace service.
• Iris social features: profile information, posts and media references where media storage is configured, direct and group messages, group membership, notifications, blocks, and reports. Media-dependent features may be unavailable in this staging environment.
• Browser storage: Iris and OGU use secure session cookies and CSRF cookies for authentication and request protection. Some marketplace review preferences and game state are kept in browser local or session storage.

Infrastructure and email

The staging application runs on Cloudflare Workers and related Cloudflare storage/services. Resend is configured as the transactional email provider for Iris account-verification and password-reset messages. This notice does not state that these providers use information for any particular independent purpose.

Privacy requests

This page does not collect or submit privacy-rights requests. The staging route /pages/data-sharing-opt-out is informational only. OGU must confirm its applicable legal obligations and actual disclosure practices before publishing a production privacy policy or request mechanism.

Items requiring confirmation before production

OGU has not established in this staging notice the applicable retention periods, complete production data flows and recipients, whether any processing is a sale or sharing under applicable law, or which jurisdiction-specific rights apply. Those facts must be verified before this notice is used as the production privacy policy.