Your account
Sidewave stores your name, your email address, a password hash if you set a password, and when you accepted these policies.
With Google sign-in, Sidewave receives your Google account identifier, your verified email and your name. No access to Gmail, contacts or files.
Your Signal
Your Signal holds what you add: name, handle, one line, bio, skills, city, whether you can attend in person, links, a portrait, your answers to the prompts and your works with their images. Images are re-encoded on upload, which removes their metadata.
Applications
When you apply to a project, Sidewave stores your answers, the decision and any message sent to you. Operators can add private notes about a person. For in-person projects, Sidewave stores your reply and, if you attend, a door code and check-in time.
Notices about your applications and new projects appear in the Log on your Signal. You can turn off new-project notices there.
What is public
Your Signal is private until you turn on its public page or a project you accepted shows you. 1K shows its holders on the roll and on seat pages, with the history of each seat. Email addresses, application answers and notes are never public.
Cookies and browser storage
One session cookie keeps you signed in and secures account requests. Signed-in sessions last up to seven days, anonymous ones up to two hours. Signing out clears the session. There are no advertising or cross-site tracking cookies.
localStorage holds a random marker that keeps sign-in and sign-out in step across tabs; it contains no account details. sessionStorage can remember your language, the last seat you viewed, a claim link while you sign in and the address you typed while signing in.
Services involved
Sidewave runs on Alibaba Cloud. Google handles Google sign-in when you choose it. Following a link on a Signal takes you to that website. Each of these receives the network information its request needs and applies its own policy.
Alibaba Cloud graphical verification protects registration, sign-in and password recovery. It processes the product ID, referring page, access time, IP address, browser information, language and your interaction with the check. Sidewave sends the verification proof to Alibaba Cloud and briefly keeps a hashed reference so it cannot be reused. See the graphical verification privacy policy and the Google Privacy Policy.
IP addresses are used for request limits. The server’s access logs record IP addresses, requested addresses and times.
How long records remain
Expired sessions, sign-in flows and verification references are removed automatically. Account, Signal, application, seat and audit records stay in the service database, as do records from earlier Sidewave services; there is no automatic deletion schedule for them. Backups hold earlier copies.
Your choices
You can edit your Signal, withdraw a waiting application and clear browser storage at any time. Account deletion is not available on the site.
Changes to this policy are published on this page with a new date.