Privacy Policy

This Privacy Policy explains how Waves (waves.do), operated by TBD Soft, collects, uses, and shares information when you use our website, APIs, and related services.

Privacy questions: [email protected].

Account information: email address, username, display name, password hash (if you use password sign-in), locale preference, bio, website, and profile or header images you upload.

Sign-in providers: if you continue with Google, we receive the identifiers and profile details the provider shares with us to create or link your account.

Content and activity: waves, replies, quotes, rewaves, likes, bookmarks, follows, blocks, mutes, reports, notifications, searches, and similar interactions.

Technical data: IP address, user agent, approximate device or client type, session tokens or cookies needed to keep you signed in, and basic request metadata used for security and abuse prevention.

Publisher and claim data: when a public RSS feed is mirrored or a publisher claims a profile, we may process public feed content, contact emails discovered for outreach, and claim verification details you submit.

To provide, secure, and improve Waves: authentication, timelines, notifications, search, trending, moderation, customer support, and fraud or abuse prevention.

To send transactional email such as confirmations, password resets, claim updates, and similar service messages. We do not sell your personal information.

To comply with law and enforce our Terms of Service.

Public profile information and public Content are visible to other users and may be indexed or shared outside Waves.

Service providers process data on our behalf, including hosting and object storage (DigitalOcean), transactional email (Amazon SES), and optional Google sign-in. They may only use the data to provide their services to us.

We may disclose information if required by law, to protect the safety of users or the public, or to defend our rights.

Waves uses essential cookies and similar storage to keep you signed in and to operate the site. We do not use third-party advertising cookies.

We keep account and Content data while your account is active and for a reasonable period afterward if needed for backups, security, dispute resolution, or legal obligations. Session and security logs are kept for shorter operational windows.

You can update profile and account settings while signed in, manage notification preferences, revoke other sessions, and control blocks or mutes.

Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. Contact [email protected] to make a request. We may need to verify your identity before fulfilling it.

You can stop using Waves at any time. Some public Content or copies held by others may remain after your account is closed.

Waves is not directed to children under 13. If we learn that we collected personal information from a child under 13, we will delete it.

Waves is operated with infrastructure that may be located in different countries. By using Waves, you understand that your information may be processed outside the country where you live, subject to appropriate safeguards required by applicable law.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. Material changes may also be communicated through the service or by email when appropriate.

Privacy requests and questions: [email protected].