Privacy Policy
What we collect, why we collect it, and what you can ask us to delete.
People come here to write about things they haven’t told their families. We treat that seriously: we collect as little as the site can function on, we never sell it, and you can leave with your data removed.
Who we are
BraveHeartMind operates the website braveheartmind.com. For data protection purposes the data controller is the individual who runs BraveHeartMind, an independent personal project based in Serbia, not a registered company; for privacy questions or data requests, email [email protected]. You can reach us via our contact page.
What we collect
When you register: a display name (which may be a pseudonym), an email address, and a password stored in hashed form. We do not ask for your real name, date of birth, address, or any health information.
When you post or submit a story: the content you write, the time you posted it, and your display name. Anything you publish is visible to others — treat it as public.
When you contact us: your name, email and message, kept only as long as needed to deal with your enquiry.
Automatically: standard server logs (IP address, browser type, pages requested) generated by our host, and cookies as described below.
Special category data — an important warning
Information about mental health is a special category of personal data under GDPR, given the highest level of protection. We do not ask you for it. But if you choose to write about your own health in a story or forum post, you are voluntarily making that information public, and you are giving explicit consent for us to publish it in that context.
Because of that, we strongly encourage using a pseudonym and leaving out identifying details — your employer, your town, your child’s school, anything that would let someone connect the account to you. Once something is published on the internet it can be copied or archived by others, and we cannot undo that.
Why we process it
To run your account and the forum (performance of a contract); to moderate content and keep the community safe (legitimate interest); to publish what you submit (your explicit consent, which you may withdraw); and to meet legal obligations where they apply.
Cookies
We use cookies that are strictly necessary to keep you signed in and to remember your session. If we add analytics, it will be loaded only after you consent, and you can decline without losing access to anything.
Who we share it with
We do not sell your data and we do not share it for advertising. It is handled by the service providers needed to run the site — our hosting provider, and the plugins that operate the forum and membership system. We disclose data to authorities only where legally required.
If you watch an embedded video, YouTube receives data directly under Google’s own privacy policy. You can avoid this by watching on YouTube directly.
How long we keep it
Account data is kept while your account is open. If you delete your account, we remove your profile and email address; published stories can be deleted with it, or anonymised and left in place if the thread would otherwise become unreadable — you choose which.
Your rights
You can ask us to show you the data we hold, correct it, delete it, restrict what we do with it, or provide it in a portable form. You can withdraw consent for publication at any time. Write to us and we will respond within one month. If you are unhappy with our answer, you may complain to your national data protection authority.
Security
The site runs over HTTPS, passwords are hashed, and administrative access is restricted. No system is perfectly secure, so please use a unique password and tell us immediately if you think your account has been accessed by someone else.
Children
Accounts are for adults. Some content is written by parents about their children — nobody under 16 should register or post here.
Changes
If we change this policy we will update the date at the top, and for significant changes we will notify registered members by email.
Related: Disclaimer · Terms of Use