Privacy Policy

Last updated: September 2026

Petty Court (“we”) is a satirical dispute-voting site. This policy explains what data we collect, why, who we share it with, and your rights. We take your privacy seriously — just not our verdicts.

1. Information we collect

Information you give us:

• Account: your username and (only if verified) your email address.
• Year of birth: the year only — never a full date. We use it solely to decide whether age-restricted content can be shown to you, and it isn’t displayed to anyone else.
• Profile: a bio, title, profile picture, and color/cosmetic choices, if you add them.
• Content you submit: cases and stories (title, description, category, aliases), defenses, votes, reactions, proposed sentences, comments, reports, drafts, friend requests, and any images you upload as evidence.

Information processed automatically:

• Cookies & session: essential cookies for your login, language, theme, and vote integrity (see below).
• IP address & browser info: used transiently at request time to detect abuse (vote bots, spam) and to limit floods of requests. Per-address request counting happens briefly inside Cloudflare’s own rate limiter; the address is never written to our database.

Information we do not collect:

• Passwords: authentication is handled by Google Firebase; we never see or store your password.
• Payment information: payments aren’t built yet, so no card/payment data is collected.
• Ad/tracking data: we use no advertising or third-party tracking cookies.

2. Cookies

We use only first-party cookies: ones that keep you signed in, make sure each vote counts once, and remember your preferences. We use no advertising, profiling or third-party analytics cookies. The full list — every cookie, what it does and how long it lasts — is in the Cookie Policy, where you can also change your choice at any time.

3. How we use information

• To create and manage your account.
• To display cases, count votes, and produce verdicts.
• To send notifications and provide site features.
• To prevent fraud, spam, and vote manipulation.
• To comply with legal obligations and protect our rights.

We do not sell your data or use it for advertising.

4. The public nature of content

Petty Court is public by design. The cases you file, your profile, and the generated “verdict cards” are, by default, visible to anyone on the internet and may be shared as link previews. With Plus you can make a case unlisted (only people with the link) or private (only the parties and moderators).

5. Who we share information with

We don’t sell your data. We rely only on these service providers (processors):

• Google Firebase Authentication — sign-in and identity. Google’s privacy policy applies.
• Cloudflare — hosting, database (D1), image storage (R2), and content delivery.

We may also disclose information where required by law or where necessary to protect our rights or the safety of users.

6. International transfers

Our providers (Cloudflare, Google) operate global infrastructure, so your data may be processed on servers outside your country. These providers apply appropriate safeguards.

7. Retention

• Sessions expire after about 30 days.
• Your content is kept until you or your account delete it.
• Image evidence is stored in Cloudflare R2 and deleted when the related case is deleted.
• IP addresses are never retained.
• Per-account rate-limit counters (your account id and a number) are kept for a few hours at most.

8. Deleting your account

You can delete your account at any time from Settings. This removes your profile, login, drafts, creator questions, and friendships, and anonymizes the cases you filed by severing your link to them. Public contributions you made to other people’s cases (votes, comments) may remain, disassociated from your account.

9. Your rights

Depending on where you live, you may have the right to:

• Access: request the information we hold about you.
• Rectification: edit your profile and cases directly in the app.
• Erasure: delete your account and content.
• Object/restrict: object to certain processing.
• Portability: Pro members can export a case’s record as JSON; for a copy of your account data, contact us.

To exercise these rights, email pettycourtofficial@outlook.com.

10. Security

• The site is served only over HTTPS, and browsers are told to insist on it (HSTS).
• Session tokens are stored only as cryptographic hashes; session cookies are HTTP-only and secure.
• Passwords are never held by us.
• A strict Content Security Policy lets only our own scripts, and Google’s sign-in, run on the site.
• Rate limits stop sign-ins, forms and votes from being flooded by scripts.
• Uploaded images are checked by their actual contents, not the type the file claims to be.
• “Sign out everywhere” in Settings ends your sessions on every device at once.

No system is 100% secure. If you find a vulnerability, please tell us privately first at pettycourtofficial@outlook.com (see our security.txt).

11. Children

Petty Court is not intended for anyone under 13 (or a higher age if your country requires it). If we learn a child has given us data, we will delete it.

12. Changes

We may update this policy and will try to give reasonable notice of material changes.

13. Contact

Questions and requests: pettycourtofficial@outlook.com