Privacy Policy
Last updated: October 2026
The short version
We collect only what we need to run Normia. We don't sell your data. We don't share it with advertisers. Your email and phone are used for verification and notifications—that's it.
What we collect
Account information: Email address, phone number (if you verify), name and username (if you provide them), and profile picture (from Google/GitHub if you sign in that way).
Content you create: Standards you propose, comments you post, votes you cast.
Usage data: Basic analytics like page views and feature usage. We use this to understand what's working and what isn't.
Device information: IP address, browser type, and device type. Used for security and rate limiting.
How we use it
Verification: Your email and phone prove you're a real person. One person, one voice.
Notifications: We email you about activity on your standards and comments. You can turn these off.
Platform operation: Displaying your content, counting votes, showing your profile to others.
Security: Preventing abuse, spam, and fraud.
What we don't do
We don't sell your personal information. Ever.
We don't share your data with advertisers.
We don't use your content to train AI models.
We don't track you across other websites.
Your content
Standards, comments, and votes you create are public by design—that's how Normia works. Your username and profile are visible to others. If you delete your account, your content may remain but will be attributed to "Deleted" rather than your name.
Your rights
Access: You can see all your data in your profile settings.
Correction: You can edit your profile information anytime.
Deletion: You can delete your account. Contact us at hello@normia.org.
Portability: You can request an export of your data.
Cookies
We use cookies to keep you logged in and remember your preferences. We don't use tracking cookies for advertising. You can disable cookies in your browser, but some features won't work.
Third parties
Authentication: Sign-in links sent by email. We never store a password.
SMS: Twilio for phone verification.
Email: Resend for transactional emails.
Hosting: Railway for servers and database.
AI research: Anthropic processes the text of standards to generate the research sections.
These services have their own privacy policies. We only share what's necessary for them to function.
Security
We use industry-standard security practices: HTTPS everywhere, encrypted databases, secure authentication. No system is perfectly secure, but we take reasonable precautions to protect your data.
Changes
If we make significant changes to this policy, we'll notify you by email or through the platform. Continued use after changes means you accept the new terms.
Contact
Questions about privacy? Email us at hello@normia.org.