Privacy Policy

The operator of Bananas from Work is the data controller for the personal data described here. Contact details are at the bottom of this page.

• Account data: your email address, password (stored hashed, we never see it), handle, your confirmation that you are 18 or older, and your answer to the banana ripeness question.
• Content: posts, comments, likes, images, chat messages, circles and contacts you create on the site.
• Purchase data: your membership status and what you bought in the shop. Card details go directly to Stripe and never reach us.
• Technical data: server logs with IP addresses, kept for security and operations.
• Visit data: for each page you open we record the time, the page, whether you are on a phone or a computer, the site or campaign link you arrived from, the country and, when Cloudflare reports it, the city you are in, and your handle when you are signed in. The location comes from Cloudflare, not from your device, and no IP address is stored.

To run the service you signed up for (contract), to keep the service secure (legitimate interest), and to meet legal obligations such as bookkeeping for purchases.

The visit data is there so we can see how the site is being used and where visitors come from (legitimate interest). It stays with us: there are no ads, no third party analytics, no advertising or tracking networks, and we do not sell your data or use it to train AI.

• Supabase hosts the database and uploaded images, in Stockholm (EU).
• Stripe processes payments.
• Resend sends account emails such as signup confirmations.
• Cloudflare sits in front of the site and routes traffic to it.

The site itself runs on our own server in the EU.

Until you delete your account. Deleting your account removes your profile and content. Purchase records are kept as long as bookkeeping law requires. Visit data is kept for 90 days, and deleting your account detaches your name from any of it that is left. Server logs are kept briefly and then discarded.

You can export your data and delete your account yourself, both from Settings. Under the GDPR you also have the right to access, correct, delete and receive a copy of your data, to object to or restrict processing, and to complain to your data protection authority (in Denmark, Datatilsynet).

The site only stores what it needs in your browser to keep you signed in. There are no third party tracking cookies.

If this policy changes in a way that matters, we will announce it on the site. Email [email protected] for anything this page does not answer. The Terms of Service also apply to your use of the site.