Privacy Policy
Effective April 2026 · yard.orgscrap.com
Our Privacy Commitment
The SCRAP Yard is built with privacy as infrastructure, not a feature. Your identity is protected at every layer of the system — from the database to the API to the interface. You can post, vote, and comment without anyone knowing it was you.
What We Collect
We collect your email address (for authentication and notifications), your display name (optional, set by you), and the content you submit — sightings, comments, and Me Too votes. If you sign in with LinkedIn, we receive your name and email from LinkedIn; we use this solely to verify your professional identity and assign you Verified Practitioner status. We do not collect browsing behavior, device fingerprints, or any data beyond what you explicitly provide.
How Anonymity Works
Your author identity is stripped from all content before it reaches other users' screens. This happens via our Privacy Middleware — a named, auditable component that processes every API response. Database-level Row Level Security provides a second layer of protection. Only you can see that you authored your content (indicated by the '✦ You' marker). Your LinkedIn verification status is used only to display a tier badge — your LinkedIn profile is never shown to other users.
Small Group Protection
To prevent re-identification in small groups, Pile data (aggregate views) requires a minimum of 5 members in a group. Filtered views require content from at least 3 distinct authors. These thresholds prevent anyone from deducing who reported what.
Email Notifications
If you post a sighting, we may send you an email when others Me Too it — so you know your experience is shared. You can turn this off at any time from your Account page. We use Resend to deliver email and do not share your address with any other third party.
Content Flagging
When you flag a sighting or comment, we record the flag along with your user ID so we can prevent duplicate flags and investigate abuse. Flag reports are visible only to platform administrators and are never shown to other members.
Your Rights (GDPR)
You can export all your data at any time from your Account page. You can delete your account, which removes your email, profile, and LinkedIn verification. Your content (sightings, comments) remains but is fully anonymized — the author reference is removed, making it impossible to link back to you.
Contact
For privacy questions or data requests, contact us at privacy@orgscrap.com.
Last updated: April 2026