What data
- <Strong> Account:</strong> normalized email address, password hash (Argon2), consent version and date.
- <Strong> Horse Profile:</strong> matching features and global region-no exact address, no owner name, no phone.
- <Strong> Communication:</strong> interest requests and in-app messages between owners.
- <Strong> Newsletter:</strong> separate table <code>mailing_subscribers</code> (email for updates only; no IP address storage).
- <Strong> Security/Abuse:</strong> short-lived pseudonymous identifiers (HMAC from IP scope) in <code>jh_rate_limits</code> for rate limiting-no raw IP storage. Rows are automatically cleaned (typically within hours of the time window).
What we don't do
- Never publicly show email addresses or share with other users.
- No personal data sales.
- Do not save a password in plaintext.
- Do not store raw IP addresses for newsletter or rate limiting.
Delete account
You can use My Account to delete your account. Linked profiles, requests and messages are then deleted (cascade).
Later: magic-link & mail
Passwordless login and email notifications require outgoing mail; that is not yet active in this demo.