Privacy Policy

When you sign up via Google OAuth, we collect:

• Your email address (immediately hashed with SHA-256 + salt, never stored in plain text)
• Your email domain (for company matching)

We never store:

• Your real name
• Your email address in plain text
• Your Google profile picture

Your data is used exclusively to:

• Verify your professional status (work vs personal email)
• Match you to your company via email domain
• Generate your unique anonymous handle
• Calculate your reputation score

Anonymity is at the core of sckoob. Your real identity is not accessible by any user, including administrators.

• Author identifiers (authorId) are never exposed via the public API
• The email hash is a one-way operation — it is impossible to recover the original email
• Administrators can only see the email domain for moderation purposes

Data is stored in a secure PostgreSQL database. All communications are encrypted via HTTPS. Sessions are managed by Better Auth with secure tokens.

Uploaded images (logos, covers) are stored on a secure cloud storage service (Cloudflare R2). Only channel/company creators and administrators can modify these images. Inappropriate images will result in immediate account ban.

sckoob uses soft deletion for all user content. When you delete a post or comment, it is marked as deleted but not permanently erased, allowing you to restore it from your trash.

We only use session cookies necessary for authentication. No tracking or advertising cookies are used.

sckoob does not share, sell, or rent any personal data to third parties. Aggregated salary data is publicly visible but contains no information that could identify a user.

In accordance with regulations, you have the right to:

• Access your personal data
• Rectify your data
• Delete your account and associated data
• Data portability

To exercise these rights, contact us at privacy@sckoob.com.

For any questions regarding this privacy policy: privacy@sckoob.com