Privacy Policy

What we never store

• Your name
• Your email address
• Your date of birth
• Any government-issued ID number or document
• Your precise location

The app and the server

When you verify your identity to join an event, the app tells our server simply that you qualify. The underlying data stays on the device.

If you use a hardware key, the same principle applies: authentication is a cryptographic exchange between the key and the app. The server sees the result, not the credential.

What we do store

Everything below is tied to a randomly generated account ID — not to your name or any identity credential.

• Your questions, endorsements, and merge votes — the content you contribute, under your pseudonymous account
• Event access records — a note that your account has standing to participate in a given event; not how that standing was verified
• Push notification token — so we can notify you about merge votes you're involved in; linked to your account, not your identity
• Session tokens — short-lived credentials that expire within 24 hours

Host and speaker accounts: identity verification

Peanut Forum is operated by Needle Parent Company LLC. To activate a host or speaker account we need to know who the person is, so this section covers what we collect from hosts and speakers. It does not apply to people who take part in events as participants.

What we collect and how it is verified

• What you give us: your name, email address, a password (stored only as a hash), a description of your affiliation and, for hosts, of your audience.
• Identity check: we use Stripe Identity. You photograph a government-issued photo ID and take a selfie. Stripe uses biometric technology to compare the selfie with the photo on the ID and to check that the document is genuine. The selfie is required: it is how we confirm that the person holding the ID is the person applying. If you are not willing to take one, we cannot verify you and cannot open a host or speaker account.
• What we receive and keep: the result, and your legal name and date of birth as read from your ID. We do not receive or keep your ID images, ID number or address. Your legal name and date of birth are turned straight away into one-way keyed hashes (an "identity key"); the name and date of birth themselves are not stored. We use the key for one purpose: to stop a person who was removed for illegal content from opening another account, and to flag possible duplicates for a human to review. We do not sell this information or disclose it to anyone else.
• Payments: if an activation fee applies, the card payment is processed by Stripe. We never see your card number.

Stripe

Peanut Forum and Stripe are each independent controllers of the personal data involved in the identity check. Stripe processes it under Stripe's Privacy Policy, in addition to acting as our service provider, and may use it to operate and improve its services, including fraud detection. As soon as your check is finished, we ask Stripe to erase the ID images, selfie and details it collected (Stripe says this can take up to four days). The one exception is a check held for a person on our side to review; that one is erased as soon as the review is done. Your information may be transferred outside your country, including to the United States, and may be shared with third-party service providers, including governmental authorities, for the purpose of evaluating your identity.

Your requests

To access or delete your data, email admin@peanutforum.com. We will delete what we hold and ask Stripe to delete the verification data it holds for us. Stripe may also retain data as its own policy and the law permit.

Governing Law

This Privacy Policy is governed by the laws of the State of California, United States, without regard to its conflict of law provisions.

Contact

Questions or concerns: admin@peanutforum.com