4nix

Privacy

The short version: 4nix keeps what it needs to run a discussion board and nothing else. No analytics, no ads, no tracking, no cookie banner — because there is nothing here that needs your consent. The long version, as the GDPR asks, follows.

Last updated 26 September 2026.

Who is responsible

4nix is run by Opercularis LLC, based in the United States, which is the controller of the personal data described here. For anything about your data, write to privacy@4nix.net.

What we keep, and why

  • Your account. When you sign in with LinkedIn we receive a stable account id, your name, your profile photo and your email address; with ORCID, your iD and your name only. We ask for nothing more, so we cannot see your feed, connections or messages, and we cannot post as you. The photo is copied to our own server. Needed to provide the service you signed up for (GDPR art. 6(1)(b)).
  • Your email. Used only to check whether you are a moderator. Never shown, never shared, never mailed.
  • What you add. Handle, headline, LinkedIn link and ORCID iD if you choose to show them, and your posts, comments, images, reactions and reports. Art. 6(1)(b).
  • Your pseudonym. Every account has one for anonymous posting. No other user can connect it to you, but it sits in the same database row as your name, so whoever runs the site could. Treat it as cover from the crowd, not from us.
  • Posts people quote. Pasting a link saves a snapshot of the public page: author, text, date, photo and picture. This is commentary on public statements, kept on the basis of legitimate interest and freedom of expression (art. 6(1)(f), art. 85). If you are quoted and object, write to privacy@4nix.net.
  • Server logs. Our host records requests (IP address, browser, address visited) to keep the site running and secure, and keeps them for a limited period. We do not use them to track anyone. Art. 6(1)(f).
  • Rate limits count actions per account in memory and are forgotten within the hour.

No profiling, no automated decisions about you, no selling or sharing for advertising.

Cookies and browser storage

4nix sets only cookies that are strictly necessary for signing in, which EU law (the ePrivacy Directive, art. 5(3)) exempts from consent. There are no analytics, advertising or third-party cookies, which is why there is no banner to click through.

NamePurposeLifetime
4nix_sessionKeeps you signed in. A random token; the server stores only its hash.30 days, or until you sign out
4nix_oauth_stateProves the answer from LinkedIn or ORCID belongs to the sign-in you started.10 minutes, deleted on return
4nix_nextThe page to send you back to after signing in.10 minutes, deleted on return

All three are first-party, HTTP-only and sent over HTTPS only. Separately, if the site updates while you are typing, your unsent draft is held in your browser’s session storage so it survives the reload; it never leaves your device and is gone when the tab closes.

Every image, avatar and font is served from 4nix itself, so reading the site never makes your browser contact LinkedIn or anyone else. Signing in takes you to LinkedIn or ORCID, whose own privacy policies apply there.

Who else handles it

  • Netlify, Inc. hosts the site and its content delivery network (United States).
  • Supabase, Inc. hosts the database, on Amazon Web Services in the United States (Oregon).

Both act only on our instructions under data processing agreements, which include the European Commission’s Standard Contractual Clauses. Beyond them, what you post publicly is visible to everyone, as on any forum; nothing else is passed to anyone.

4nix is run from the United States and all of its data is stored there. If you use it from the European Union, the United Kingdom or elsewhere, your data is processed in the United States, where data protection law differs from your own. The GDPR still applies to how we handle it, and the rights below are yours wherever you are.

How long

  • Your account and content: until you delete them.
  • A deleted post or comment: its text, quote and images are erased at once. An empty placeholder remains so replies keep their place in the thread.
  • A deleted account: everything above goes immediately — profile, email, posts, comments (signed and anonymous), reactions, reports and images. Replies others left under your comments stay, without yours.
  • Sign-in sessions: thirty days; expired ones are purged.
  • Copies in our providers’ rolling backups and caches are overwritten within their usual cycle.

Your rights

Under the GDPR you can, at any time:

  • see and take your data (arts. 15, 20): Settings → Download my data;
  • correct it (art. 16): edit your profile in Settings, or delete and repost;
  • erase it (art. 17): delete any post or comment, or the whole account in Settings;
  • restrict or object to processing (arts. 18, 21), including if you are quoted without being a member: write to privacy@4nix.net;
  • complain to the data protection authority where you live or work (art. 77).

We answer requests within a month and never charge for them.

Security

HTTPS everywhere, with strict transport security. Session tokens are random and stored only as hashes. The database is closed to direct access from the internet. Uploaded images are re-encoded in your browser before they leave it, which strips location and device metadata.

The small print

4nix is for adults; it is not meant for anyone under 16. If this notice changes in substance, the date at the top changes with it. The source code is public on GitHub, so every claim here can be checked.