Barracuda MMC ("Barracuda", "we", "us", or "our") operates HYDE Park and is responsible for the personal data described in this Policy. We process personal data in connection with operating a moderated public discussion service, in accordance with applicable Azerbaijani law, including the Law of the Republic of Azerbaijan on Personal Data.

1. Information we process

Depending on how you use HYDE Park, we process account data such as your username, password hash, account type, and—if you choose a Public Speaker account—your email address and optional profile details. We also process authentication and security information, such as session records and password-reset or email-verification tokens.

Anonymous accounts do not require a real name or an email address. Anonymous does not mean that HYDE Park stores no data: we still retain the minimum account, security, and public-record data needed to operate the account and protect the service.

We process the content and attachments you submit, including Hydes, replies, Rehydes, Rallies, Parades, images, YouTube links, reports, and moderation-related records. We also process settings you choose, such as profile visibility, notification preferences, and theme preference, as well as limited technical information needed to operate and secure the service.

2. Public information and permanence

Published Hydes, Rallies, Parades, replies, Rehydes, images, and YouTube links are public. Do not publish personal data, confidential information, or images that you do not wish to be publicly available. Public content is designed to form a permanent HYDE Park record and cannot be edited or deleted by its author after publication.

If you delete your account, HYDE Park removes private account data and private activity where technically and legally appropriate, including sign-in sessions, recovery email, private saved items, preferences, and notification inbox data. We preserve public content, aggregate public counts, and safety, report, and audit records when necessary for the integrity of the public record, safety, legal obligations, or defence of claims. Where safeguarding requires it, including when an account is confirmed to belong to a person under 16, we may disable the account and hide or remove its public material while retaining restricted audit evidence. A Public Speaker's published name may remain attached to historic public content; anonymous accounts do not retain a public real-name profile through account deletion.

3. Why we use information

We use information to create and administer accounts; authenticate users; publish and display public discussion; maintain the permanent record; deliver requested settings and notifications; investigate reports; moderate content; detect and prevent fraud, abuse, and security incidents; comply with legal obligations; and improve the reliability and safety of HYDE Park.

Where consent is required, we ask for it through the relevant product flow. You may withdraw consent where applicable, but doing so does not affect processing that occurred before withdrawal or content already incorporated into the public record where retention is necessary.

4. Moderation and service providers

Text and images submitted for publication are sent to automated moderation systems, including OpenAI's moderation service, to help identify content that may violate safety rules. We may also use providers for hosting, database infrastructure, email delivery, security, and other service operations. Those providers may process data only as needed to provide their services to us and subject to appropriate contractual and security safeguards.

If you play an embedded YouTube video, YouTube may collect information under its own privacy practices. HYDE Park uses YouTube's privacy-enhanced embed domain where available, but cannot control YouTube's processing.

5. Storage, security, and international transfers

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, and disclosure. No internet service can promise absolute security. Some providers may process data outside Azerbaijan. When that occurs, we will take measures required by applicable law for the relevant transfer and provider.

6. Retention

We retain account and operational information for as long as needed to provide the service, meet the purposes described here, resolve disputes, enforce our agreements, and comply with legal obligations. Verification and password-reset tokens expire according to their purpose. Public content and the records needed to protect and verify it may be retained permanently. We review other personal data and remove or anonymise it when it is no longer required.

7. Your choices and rights

Subject to applicable law, you may request information about personal data held about you, request correction of inaccurate data, object to or withdraw consent for certain processing, and raise concerns about how your data is used. The public-record nature of HYDE Park means that a request may not require removal of published content where we have a lawful reason to retain it. We will explain any limitation that applies to a request.

8. Children

HYDE Park is not for anyone under 16. We do not knowingly allow accounts for under-16s. If you believe that a person under 16 has provided personal data to HYDE Park, contact us so that we can investigate and take appropriate action.

9. Changes and contact

We may update this Policy when our practices, service, or legal obligations change. We will post the updated version and revise the last-updated date. For privacy questions or requests, contact Barracuda MMC at info@hydepark.app.