THIASOS
Claim your sigil

Privacy

Last updated 11 October 2026. THIASOS keeps as little as it can, shows other members only what you choose to share, and never sells or rents anything about you.

  1. Who is responsible

    THIASOS is run by an individual in Türkiye, who is the data controller under the GDPR and KVKK. Contact: [email protected].

  2. What we keep

    • From Google sign-in: your name and email address. Only the council can see them; other members never do.
    • Your profile: your sealed name and sigil, Calling, city, tags, bio, listening link and availability. Other members see these.
    • What you do: posts and photos, stories (deleted after 24 hours), likes, comments, follows, Workings you raise or join, vouches, and reports you send.
    • Messages: stored so the two of you can read them. Only the two of you can.
    • Location: when you tag a post with a Working, your phone's position is sent once, compared with the Working's pin, and thrown away. We keep only whether it matched and the distance in metres. A Working's pin is stored, and for Secret Temples it stays hidden until three hours before the start.
    • Photos: resized in your browser before upload, which strips their embedded data (including any GPS tags).

  3. Why, and on what basis

    To run the service you signed up for (contract), to keep members safe and handle reports (legitimate interest), and to use your location only when you allow it (consent). We use no advertising, no tracking cookies and no analytics that profile you. The only cookies are the ones that keep you signed in.

  4. Who else handles it

    THIASOS runs on Cloudflare (hosting), Supabase (database and photo storage, in Frankfurt, EU) and Google (sign-in). They process data for us under their own data-protection terms. Some of them may process data outside Türkiye and the EU, under the safeguards those terms provide.

  5. How long

    Until you delete it or leave. Stories go after 24 hours. When you leave, your account, profile, posts, photos and messages are deleted. A counter that makes sure no one else ever gets your sigil's hidden number stays; it holds nothing about you.

  6. Your rights

    You can see, correct, download or delete your data, object to how it's used, and withdraw consent (for location, just say no when asked). Most of it you can do yourself from your page; for the rest, write to [email protected] and we'll answer within 30 days. You can also complain to your data-protection authority (in Türkiye, the KVKK Board; in the EU, your national authority).

  7. Age

    THIASOS is for people 18 and over. If we learn an account belongs to someone younger, we delete it.

Privacy · THIASOS