Privacy Policy for Agora

Last updated: July 7, 2026

This Privacy Policy describes how Agora ("we," "our," or "the app") collects, uses, and shares information when you use our social platform application.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Username and display name
• Password — stored only as a securely salted hash; we never store or have access to your plaintext password
• Bio (optional, up to 300 characters)
• A security question and answer you choose. Agora does not use email, so this is how you recover your account if you forget your password. The answer is normalized and stored as a securely salted hash, the same way your password is — nobody at Agora, including admins, can see it in plain text.

We do not collect or ask for an email address, phone number, or date of birth at any point.

1.2 Profile Image

You may optionally upload a profile picture (JPEG, PNG, GIF, or WebP, up to 5MB), selected from your device's photo library or files via your browser's or OS's standard file picker. If you don't upload one, your profile displays a simple generated icon (your initials on a colored background) instead. Agora does not access your camera directly, and does not access your photo library except for the specific image file you actively choose to select and upload.

1.3 Content You Create

• Posts (up to 1,000 characters), which may optionally include a photo, a video (up to 25MB, MP4/WebM/MOV), and/or a link
• Comments on posts (up to 1,000 characters)
• Likes and follows
• Albums — labels you create to organize your own posts by tag, plus whether you mark that grouping public or private

1.4 Social Safety Actions

• Accounts you block or mute, and when
• Reports you file against a post, including your reason and the post reported
• If your content is reported or automatically flagged, we keep a moderation record of the reason and timestamp — for automated flags, we deliberately do not retain a copy of the content itself alongside that record

1.5 Session Data

When you sign in, we issue a random session token so you don't have to re-enter your password on every action. Only a one-way hash of that token is stored on our servers (with a 30-day expiration); the token itself, along with a cached copy of your own profile, is held in your browser's local storage on your device. Agora does not use tracking cookies.

1.6 Network Information

Our servers process your IP address transiently to rate-limit requests (for example, capping how many accounts or login attempts can come from one network in a short window). This is used only to prevent abuse; it is not linked to your profile or retained beyond the short rate-limit window (ranging from one minute to one hour depending on the action).

2. Information We Do NOT Collect

Agora does not access, collect, or process:

• Camera or microphone data. Access to both is technically disabled at the browser level for anyone visiting Agora, not just left unused in our code.
• Precise or approximate location data
• Biometric data (e.g., fingerprints, facial recognition, voiceprints)
• Contacts or address book data
• Health or fitness data
• Your email address — Agora has no email system

Agora also includes an optional on-device timer that shows you how long you've spent in the app that day, as a gentle, no-pressure check-in. That calculation happens entirely on your device and is never transmitted to us — we have no visibility into it.

If any of this changes in a future version of the app, we'll update this policy first and, where required, ask for your consent before collecting anything new.

3. How We Use Your Information

We use the information above to:

• Create, maintain, and authenticate your account, and let you recover it if you forget your password
• Display your posts, profile, and social connections to other users as intended by the app's design (Agora is a public social feed — posts, profiles, and albums marked public are visible to other users and, where unauthenticated browsing is allowed, to visitors)
• Enforce content rules by automatically screening new posts for spam, profanity, and (for images) unsafe visual content, as described in Section 4
• Act on reports and blocks/mutes to keep the platform usable, including giving administrator accounts visibility into reported content so they can review and, if warranted, remove it
• Prevent abuse, like spam sign-ups or brute-force login attempts
• Maintain the security and integrity of the platform

4. Automated Content Moderation & Third-Party Sharing

Agora screens content automatically before it's published:

• Text (posts and comments) is checked against spam and profanity patterns using logic that runs entirely on our own servers. No text content is sent to any outside company for this purpose.
• Images attached to posts are additionally sent to Anthropic's Claude API (api.anthropic.com) — the same underlying technology that powers this policy-writing assistant — to automatically classify whether the image contains nudity, graphic violence, gore, or hate symbols before the post is allowed to go live. This is the one case where your content is shared with an outside company as a routine part of how the app works, and it applies only to images you attach to a post, not to your text, profile, avatar, or videos.

We don't use this or any other third-party service for advertising, analytics, or profiling — only for this safety check.

5. Data Storage

Account, content, and moderation data is stored using Cloudflare D1 (database) and Cloudflare KV (used specifically for uploaded images and videos). All of Agora's backend infrastructure runs on Cloudflare; we don't operate separate servers of our own.

6. Data Sharing

We do not sell your personal information, and we do not share it with third parties for advertising or marketing. We share information only:

• With Cloudflare, as the infrastructure provider hosting our database, file storage, and backend functions
• With Anthropic, limited to post images and solely for the automated safety check described in Section 4
• Where required by law
• To protect the rights, property, or safety of Agora, our users, or the public

7. Data Retention

We retain your account and content data for as long as your account is active. You can delete individual posts yourself at any time, which removes them immediately. Uploaded images and video are stored in a way that's built for fast delivery rather than instant deletion, so removed media may take some additional time to be fully cleared from underlying storage after the post referencing it is deleted.

There is currently no automated, self-service "delete my account" option inside the app. To request deletion of your account and associated data, contact us using the information in Section 11, and we will delete or anonymize it within a reasonable period, except where retention is required for legal or security purposes.

8. Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data (see Section 7)
• Change your password or your security question/answer at any time from within the app
• Delete individual posts you've created at any time from within the app

To exercise these rights, contact us using the information in Section 11.

9. Children's Privacy

Agora is not directed to children under the age of 13 (or the relevant minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without appropriate consent, we will take steps to delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the app after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

alexandradj101@hotmail.com

This policy is intended to accurately reflect Agora's current data practices as of the date above, based on a direct review of the app's source code. If app functionality changes (for example, if new features requiring additional data types are added, or an in-app account deletion flow is introduced), this document should be updated before those features are released.