‹ MyWBS.com

Privacy Policy

Last updated: September 2, 2026

MyWBS.com is being built. Today the site offers Google sign-in and a simple social network: members can post stories and photos, make friends, block members, and report content. This page explains, plainly, what that collects and what happens to it.

What Google sends us

Signing in asks Google for exactly three permissions (openid, email, profile). From those, Google gives us:

• your permanent Google account ID, which we use as the stable anchor for your account;
• your email address, and whether Google has verified it;
• your display name;
• the URL of your profile photo — we store the link, not a copy of the image.

We never see or store your Google password.

What we store

• Your account record: Google account ID, email address, email-verified flag, display name, profile photo URL, sign-in provider, role, permission level, account status, when the account was created, and when it last signed in.
• Your sessions: the SHA-256 hash of each session token — never the token itself — plus when the session was created, when it expires, when it was last seen, the browser identifier, and the IP address.
• A sign-in audit log: the event type (sign-in succeeded, sign-in denied, sign-out, session expired, admin action, account deleted), the email address, a short detail string, the IP address, the browser identifier, and a timestamp. It exists to protect accounts and investigate abuse.
• A per-account settings store (simple key and value pairs) holding small choices you make on the site — for example your Top 8 order or which invite link brought you here.
• What you post: your stories, and your photos with their upload time and dimensions. Photos are re-encoded on upload, which strips hidden camera metadata such as GPS location before anything is saved — the original file is never stored. Just before that strip, the camera settings alone (camera and lens model, aperture, shutter, ISO, focal length — never location) are read and shown back to you, so a photography-club tip can prefill them; they are stored only if you post them. Posts and photos are visible to signed-in members.
• Your connections: friend requests, friendships, and your block list. Who you have blocked is visible only to you.
• Reports and moderation records: if you report something we store the report; if a moderator acts on content or an account, the action, the moderator, an optional note, and a timestamp are logged.
• Private messages: the message text, who sent it to whom, when, and whether it has been read. Messages are visible only to the two members in the conversation, and a sender can delete their own message for both sides at any time.
• Live chat: the message text, who wrote it, when, and any emoji reactions, plus photos shared there. The chat keeps only the newest 100 messages and nothing older than 24 hours: messages are held in the chat server's memory (with a small on-disk snapshot so a restart loses nothing), and photos are deleted from disk within about an hour of that. Chat is never searchable and never included in the database backups. Who is in the room is visible to everyone in it.
• Pen-pal letters: like private messages (visible only to the two correspondents, never searchable), plus a delivery time — letters become readable about 12 hours after sending, and a sender can recall a letter until it arrives.
• Your profile song: if you upload one, we store the audio file and its title/artist text; it plays for members who visit your profile, and removing it deletes the file.
• Game and quiz scores: your scores in games, quizzes, and trivia-night rounds, kept so leaderboards and personal bests work. They are deleted with your account.
• Hiking trails, runs, and rides: if you share a GPS track in a hiking, running, or cycling club, your browser parses the file and sends only a simplified map line (at most a few hundred points) with its distance and ascent — the GPX file itself never reaches us. A track is location data: the upload form warns you to trim anything that reveals your home first, and what you see in the preview is exactly what is stored. Runs and rides also store their date, distance, duration (and for rides, climbing and bike type), visible to clubmates and never searchable. Deleting the entry, or your account, deletes it all.
• Club visits: for each club you belong to we keep one timestamp — when you last opened it — so the Clubs hub can show what's new since you looked. Nothing else about the visit is recorded, and the timestamp is deleted when you leave the club, when the club is deleted, or with your account.
• Backups: the database is backed up on this same server (nightly, kept 14 days, plus weekly site backups kept for 10 weeks). Deleted content and deleted accounts age out of backups automatically as they rotate.

Cookies

All of them are first-party. There are no advertising or analytics cookies and no third-party trackers on this site.

• wbs_session keeps you signed in, for up to 90 days. It is Secure, HttpOnly and SameSite=Lax, and holds a random token; the server keeps only that token's SHA-256 hash, so a copy of the database cannot be replayed as a login.
• wbs_oauth_state and wbs_oauth_next last 10 minutes and are scoped to /auth/. They protect the sign-in handshake against cross-site request forgery, and are deleted afterwards.

Server logs

The web server writes ordinary operational logs: access logs (IP address, timestamp, requested URL, response status, referring page, browser identifier) and error logs, which record the details of failed sign-ins.

Who can see it

• We do not sell, rent, or share your personal information.
• The only third party involved is Google: for the sign-in itself, and — only on movie-night and karaoke-night pages, and only after you press play — YouTube's privacy-enhanced video player (nothing from YouTube loads before that click). Both operate under Google's privacy policy.
• We would disclose information only if legally required to.

Why sign-in is through Google

We use Google sign-in so that MyWBS.com never stores a password for you. Authentication happens on Google's side, protected by your own Google account security — including any two-factor protection you have enabled.

Age requirement

MyWBS.com is for adults: you must be 18 or older to use it. Google does not tell us your age or date of birth, so the requirement rests on your own confirmation when you sign in. We do not knowingly collect information from anyone under 18; if we learn an account belongs to someone under 18, we delete it.

Your controls

Everything is on your account page.

• Sign out at any time.
• Delete any of your posts at any time — the post and its photos are removed permanently, on the spot.
• Delete your account. This permanently removes your account record; your posts, photos, private messages (both sides of every conversation), friendships, blocks, sessions and settings go with it automatically, and your rows in the sign-in audit log are purged, leaving a single anonymised marker that records only that an account was deleted — no email address, no account ID. It cannot be undone. You are welcome to sign in again later, which simply creates a fresh account.
• Expired sessions are purged automatically.

This policy will change

MyWBS.com is still in development, and this page describes only what the site does today. We will update it as the site gains features.

Questions about this policy? Contact the site owner. See also the Terms of Service.