Privacy
You're posting photos of your own house. We take that
seriously, and here's exactly what we do about it.
Starting point, not legal advice. Have someone qualified read it before you
rely on it, and update it whenever what the site does changes.
We strip the location data out of every photo before it goes live.
Phones write GPS coordinates into the picture file. We re-encode every upload
in your browser before it is sent, which removes those coordinates along with
every other embedded camera field. The file that reaches our storage has
never contained your location.
What we collect
- Your photo — resized and stripped of embedded data, as above.
- A username you choose, and a password stored only as a
bcrypt hash. We cannot read your password.
- What you type — the name of your setup, the town you
give, gear tags, and comments.
- Your votes, tied to a random identifier stored in your
browser so the same person can't vote twice on one entry. It isn't
linked to your name.
What we don't collect
- No email address. There isn't a field for one.
- No street address. We ask for town and state, and we ask you not to
give more.
- No analytics or advertising trackers.
- No location from your device.
Please don't post a photo showing your house number or street sign.
We can remove the data inside the file, but we can't remove what's visible in
the picture. Everything posted here is public.
Where it lives
Entries, comments and votes are stored in a Postgres database, and photos in
object storage, both hosted by Supabase. The site itself is served by Vercel,
who keep standard server logs including IP addresses.
Affiliate links
Some gear links earn us a commission — see the
affiliate disclosure.
Clicking one hands you over to that retailer, who will apply their own
tracking under their own privacy policy. We don't receive any personal
information about what you buy.
Cookies and local storage
No advertising cookies. We use your browser's local storage to remember
your sign-in, which entries you've rated, and whether you like the music.
That data stays on your device.
Getting your stuff removed
If you're signed in as the account that posted something, you can delete it
yourself. Otherwise email us and we'll remove it — no arguing, no form.
Deleting an entry removes its photo, comments and votes.
One honest limitation. There's no email address attached to
accounts, which means there is no password reset. If you lose your password
the account can't be recovered, and we can't verify you own it. Email us and
we'll take down a specific post, but we can't hand the account back.
Children
This isn't a site for children and we don't knowingly collect anything from
anyone under 13. If a child has posted something, tell us and it goes.
Contact
hello@ratemyskeleton.com
— replace with your real address before launch.