Last updated: March 28, 2026
1. Information We Collect
When you use Sanctum, we collect:
- Account information: Email address, username, display name, role, and password (stored as a cryptographic hash)
- Profile information: Bio, location, avatar, social links (voluntarily provided)
- Content: Posts, messages, media uploads, wishlists
- Usage data: IP addresses, access times, and pages visited (collected in server logs)
2. How We Use Your Information
We use your information to:
- Provide and maintain the Sanctum platform
- Authenticate your identity and secure your account
- Send transactional emails (verification, password reset, notifications)
- Enforce our Terms of Service and content policies
- Respond to reports and legal requests
3. Information Sharing
We do not sell your personal information. We may share information only in these circumstances:
- Public profile data: Your username, display name, role, bio, and avatar are visible to other users
- Legal requirements: When required by law, subpoena, or to report suspected illegal activity (particularly content involving minors)
- Safety: To protect the rights, property, or safety of our users or the public
4. Data Security
We protect your data with:
- HTTPS/SSL encryption for all connections
- Bcrypt password hashing (passwords are never stored in plaintext)
- JWT-based authentication with token expiration
- Rate limiting to prevent abuse
- Security headers via Helmet.js
No system is 100% secure. We cannot guarantee absolute security of your data.
5. Data Retention
We retain your data for as long as your account is active. When you delete your account, your profile information is anonymized. Uploaded content is removed. Some data may be retained in backups or logs for a limited period as required for legal compliance.
6. Your Rights
You have the right to:
- Access your personal data (via your profile and settings)
- Update or correct your information
- Delete your account and associated data
- Block other users from contacting you
- Report content that violates our policies
7. Cookies & Local Storage
Sanctum uses browser local storage to maintain your login session and age verification status. We do not use third-party tracking cookies or analytics services.
8. Children's Privacy
Sanctum is strictly for users 18 years of age and older. We do not knowingly collect information from anyone under 18. If we learn that a user is under 18, their account will be immediately terminated.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes via email or a notice on the platform.
10. Contact
For privacy-related questions or data requests, contact us at vestacreateinfo@gmail.com.
© 2026 Sanctum by VC. All rights reserved.