Privacy Policy
Effective from Webernaut’s public community launch. Adopted October 20, 2026; account-deletion clarification adopted October 21, 2026.
Webernaut is built to help you explore the web without asking for more information than it needs. This Policy explains the information involved in browsing, using an account and contributing content.
Who to contact
Webernaut is operated by an individual in British Columbia, Canada. For privacy questions, requests or complaints, email hello@webernaut.com.
Information used to run Webernaut
When you browse: Our hosting and security services receive ordinary technical request information, such as IP address, browser information, requested pages and connection times. This is used to deliver the site, troubleshoot issues and protect it from abuse. You don't need an account simply to browse.
When you sign in: We use WorkOS for email/password and Google authentication and process the account details needed for your Webernaut identity, such as an email address, username and session information. Google sign-in also involves Google's authentication service. Authentication emails, including password-registration verification and password recovery, are delivered through Resend. Routine password or Google sign-in does not normally send a Webernaut authentication email.
Necessary account communications: We may use your account email for account access and security, important service notices, support, moderation or enforcement notices (including explanations of actions taken on your content or account), and applicable privacy or legal notices. These operational emails are separate from newsletters or promotional marketing. Creating an account does not subscribe you to marketing; any marketing remains subject to a separate choice.
When you use personal features: We process the websites you Save, Collections you create, private notes, publication versions and related account activity needed to provide those features. Recently Visited is also available in your browser without an account. Recently Visited stays in the browser you use and does not currently synchronize between devices. Saved Websites and Collections use your account when those features are enabled.
When you contribute to the community: Public Finds, classification contributions, public Collections, descriptions, captions and Likes use the information needed to show the contribution, maintain attribution and keep community features working. We may use limited account and network signals to reduce spam, manipulation and abuse, including attempts to create false independent community votes.
When you report a concern: We process the content of your report, the affected website or Collection, any contact details you choose to provide and limited records needed to review the issue and enforce a decision. Reports are not displayed as public contributions.
What other people can see
Public Finds and Collections may show their titles, descriptions, public captions, contributor usernames, provenance and community signals. Public published versions may remain available to people who legitimately Saved or Remixed them, even after ordinary deletion of the original.
Private notes, unpublished Collection changes, credentials, private account information and personal Saved lists aren't automatically published or copied into Remixes. Serious privacy, legal or safety removals can override ordinary public-content retention.
If you accidentally publish sensitive information, contact us at hello@webernaut.com or use Report. We'll assess an appropriate removal, including affected retained versions where necessary.
Analytics and your choices
Webernaut uses optional Google Analytics to understand public exploration and whether actions such as saving, contributing, creating or publishing Collections and sharing succeed. Minimal completion signals may come from account workflows, but do not include private content or account identifiers. This optional measurement runs only after you allow it. You can continue without analytics and change your choice later through Privacy Preferences in the footer.
If you close the initial analytics notice without choosing, analytics stays off and the notice is deferred. A saved acceptance or refusal is remembered in that browser rather than routinely expiring after a fixed number of days. Clearing browser data or changing the analytics purpose may require a fresh choice.
After you accept, Google Analytics may use cookies and similar identifiers to measure public-page activity and minimal action outcomes. Webernaut excludes private pageviews, private content and account identifiers, and removes content identities, query strings and fragments from analytics page locations. Broad source areas, such as Finds or Saved Websites, may accompany an action; their contents do not. Google Signals and advertising personalization are disabled in the reviewed configuration. Withdrawing consent stops future optional measurement and clears accessible analytics cookies; it can't erase data already delivered to Google.
Your choice about analytics is separate from any future advertising service or advertising-related consent.
Storage, providers and external websites
We use Vercel for hosting and automated browser-capture execution, WorkOS for authentication, Resend for authentication-email delivery, Supabase for application data, and Cloudflare R2 for media and encrypted recovery storage. Google Analytics is optional. Some processing may occur outside Canada. See Cookies & Browser Storage for information about local and optional storage.
When you add or submit a website, Webernaut may retrieve public metadata and create a sanitized image or screenshot. Automated retrieval and screenshot generation use separate service environments, not your personal authenticated browser session. Curators may also supply manually captured and cropped website imagery.
For websites submitted for public sharing or already publicly listed, Webernaut may send the destination URL to Google Web Risk to check for known security threats. Merely saving a website privately does not authorize that external threat check.
When you follow a link away from Webernaut, the destination website operates under its own privacy practices.
How long information is kept
We keep information only as long as reasonably needed to provide the service, protect it, meet legal obligations and preserve reliable recovery or required removal records.
Recently Visited keeps at most 500 distinct items from the previous six months, whichever limit is reached first. You can remove individual visits or clear the list. Browser data can also disappear when you clear or lose access to local storage.
Account information and private Collections are kept while needed for your requested features, subject to deletion and legal obligations. Ordinary resolved report explanations, free-text review evidence and report-time comparison projections expire automatically 12 months after resolution. Unresolved cases, active appeals, active restrictions and explicitly held legal or safety matters remain retained while required. When the case or last hold closes, the ordinary 12-month clock begins.
Minimal non-sensitive enforcement, removal and revocation records may remain longer for security, recovery, auditability and to prevent older backups from restoring withdrawn or restricted material. Keeping those records does not justify keeping raw complaint text indefinitely. Recovery reconciles newer expiry records before restored evidence is made available.
Access, export, deletion and complaints
You can manage your account content, change analytics preferences, remove local history and use account export and deletion controls. Some requests, including access or correction, may also be available under applicable privacy law. We may need to verify your authority before disclosing protected information.
Deleting your account removes your private account data, drafts, private Collections, notes, Saved Websites and other personal information. Public contributions you previously chose to publish, including public Finds and Collections, may remain available with neutral attribution. Surviving public Collections are frozen and attributed to Former member, without public account identifiers. Minimal provenance, required evidence, deletion markers and limited backup records may remain where operationally or legally necessary. Newer deletion and restriction records must be reconciled before a restored backup can be released. Provider cleanup may take additional time.
Webernaut doesn't routinely ask for a birthdate or identity documents to browse or create an account. Where specific child-protection or consent requirements apply, we will use proportionate safeguards.
For questions, corrections or complaints, contact hello@webernaut.com. You may also have rights to contact the applicable privacy regulator.
Terms of Use · Cookies & Browser Storage · Reporting & Moderation
