Privacy Policy

Account Information. When you register, we collect your username, email address, and a securely hashed password. You may optionally provide a display name, avatar, location, website, and barefoot preferences on your profile.

Content You Submit. Businesses, corporations, reports, ratings, reviews, images, and comments you post are stored and displayed publicly. This includes the 5 Toe rating, binary friendliness rating, and any edge case notes you provide.

Communications. When you submit a support request, we collect your name, email address, and message content.

Technical Data. We record your IP address when you log in (for rate limiting), submit forms (for abuse prevention), and as part of standard web server logs. We may cache your approximate geographic location based on IP address for ad targeting.

Uploaded Images. Avatars, gallery photos, and business images you upload are stored on our server. Avatars are resized to 300x300 pixels.

To Operate the Directory. Your reports, businesses, and ratings are displayed to the public as community content. Your username is shown alongside your contributions.

To Communicate With You. We use your email to send verification links, password reset tokens, and responses to your inquiries. We do not send marketing emails.

To Prevent Abuse. IP addresses, rate limits, honeypot fields, and time gates help us detect and block spam, duplicate accounts, and fraudulent activity. Flagged content is reviewed by moderators.

To Improve the Service. Aggregated, anonymized data (such as average ratings and report counts) is used to power the directory and may be shared publicly as part of the site's content.

Geocoding. When you submit a business address, we send it to the LocationIQ API to obtain geographic coordinates for map display. No personal data (name, email, IP) is included in these requests.

Legal Compliance. We may disclose information if required to do so by law or in response to a valid legal request from a government authority.

Public Content. Your username, reports, ratings, and business submissions are visible to all visitors. Your email address and private profile fields are never publicly displayed.

Your account remains active until you request deletion. Reports, businesses, and ratings you submit are retained as part of the community directory even if your account is deleted (they become attributed to "deleted user").

IP address logs for login attempts are retained for 30 days. Server access logs are retained for 14 days.

Inactive accounts (no login for 2 years) may be archived or deactivated.

Access and Update. You can edit your profile at any time from your account settings. View your public profile at /profile/your-username.

Account Deletion. You can delete your account directly from the account deletion page. A confirmation link will be sent to your email.

Flag History. You can view the resolution notes for flags placed on your content from your profile page.

Data Portability. You may request a copy of your personal data through our support page.