Bloomfora · Our commitments

Share a little. Keep a little.

Use a display name rather than your real name. Your email is not shown to other members. This is pseudonymous participation, not a promise of complete anonymity.

Account details are handled by Neon Auth. Bloomfora stores your display name, account identifier, contributions, reports and any question list you explicitly save. The application is hosted on Cloudflare; the Neon database is in Sydney. Providers may process operational data in other locations.

Guides and public conversations can be read without an account, including by search engines. New posts default to Public; before sharing, you can choose Members only instead. Replies have the same visibility as their conversation. Members-only conversations require sign-in, but readers can copy or screenshot them. Public content may remain in search results or copies after removal, and our public cache can take up to one minute to refresh. Please avoid names, contact details, precise locations and medical documents. Moderators can review discussions and reports.

Unsaved preparation notes stay in tab memory. Saving sends them to the database, where access is restricted to your account through the application. Administrators and infrastructure providers may have technical access; this is not end-to-end encryption.

Optional PostHog analytics is off until you choose Allow basic analytics. It counts homepage and topic-index visits and basic navigation choices, using a random identifier that lasts only for the current page session. We do not send names, emails, account IDs, health topics, questions, discussion text, IP addresses or replay recordings to PostHog. PostHog processes these limited events in the United States. You can change your choice using Analytics choices; your preference is stored on this device. There are no advertising trackers. Providers may retain necessary security and operational logs. Please do not put sensitive details into URLs.

You can remove your own contributions from community view. Removal is a soft deletion for moderation records; provider backups may retain copies. For account deletion, retention or other privacy requests, use the request form in Your space. Avoid including health details in your request.