Account information. When you create an account: your name, email address, a hashed version of your password (we never store your actual password), and your role (Student, Researcher, Lecturer, Law Enforcement, Military Personnel, Legal Practitioner, Cybersecurity Specialist, or Community Member).
Profile details you choose to add. Bio, institution, skills, and research areas — all optional, all editable or removable by you at any time from your Profile page.
Content you create. Posts, comments, case study discussions, research uploads, and any images you attach. Images are stored by our media host, Cloudinary, not on our own servers.
Messages. Direct messages you send to other members, including read/delivered status.
Activity data. Likes, saved/bookmarked posts, community memberships, and event attendance — used to power those features (e.g. showing you which posts you've already liked).
Automatically generated data. Timestamps on everything you create, and notifications about activity relevant to you (replies, likes, community joins). Notifications are automatically deleted 30 days after they're created.
We do not sell your data, and we do not use it to serve third-party advertising.
Other members. Your name, role, institution, bio, and anything you post publicly (feed posts, comments, case study discussions) are visible to other logged-in members. Direct messages are visible only to you and the recipient.
Service providers. We use Cloudinary to host images you upload, and an email provider to send verification codes. These providers process data on our behalf and don't use it for their own purposes.
We do not share your data with any other third party.
Passwords are hashed with bcrypt before storage — we cannot see or recover your actual password. Authentication uses a signed token (JWT) stored in your browser's local storage, which is how you stay logged in between visits. This token isn't a cookie and isn't shared with other sites.
Interface preferences like dark mode and sidebar state are stored only in your browser and are never sent to our servers.
Notifications are automatically deleted 30 days after they're created. Everything else — your account, posts, comments, and messages — is kept until you delete it yourself (where that's available) or ask us to remove it.
Account deletion isn't yet self-service from your Profile page. To request deletion of your account and associated data, contact us using the details below.
Content posted under Community Safety Alerts is submitted by members, not verified by Tynwald, and is not monitored by emergency services. It is not a substitute for contacting local police, emergency services, or the appropriate authorities in a genuine emergency.
Tynwald is intended for users aged 16 and older, given its focus on criminology, criminal justice, and related professional fields. We do not knowingly collect data from anyone younger.
If this policy changes in a way that affects how your data is handled, we'll update the "Last updated" date above and, for significant changes, notify members directly.
Questions about this policy, or requests regarding your data, can be sent to contact.tynwald@gmail.com.
→ Read the Terms of Service