--- title: "Fluxer Feedback privacy notice" description: "What Fluxer Feedback keeps about you, who can see it and how long we keep it." url: "https://canary.fluxer.com/feedback-privacy" language: "en" last_updated: "2026-11-01" effective: "2026-10-24" --- > Index of Fluxer's official pages for AI agents: https://canary.fluxer.com/llms.txt > Links to Fluxer pages go to their Markdown versions when they have one. For other Fluxer help, policy or blog links, remove any #section part and add .md to the end. # Fluxer Feedback privacy notice ## 1. About this notice This notice adds to our [privacy policy](https://canary.fluxer.com/privacy.md) for people who use [Fluxer Feedback](https://feedback.fluxer.com), our site for bug reports and feature requests. It also applies to you if something you wrote on GitHub or sent to our old bug report bot was copied to the site. Fluxer Platform AB is the controller of this data, as [section 1](https://canary.fluxer.com/privacy.md) of the privacy policy explains. Everything that the privacy policy says about [how to contact us](https://canary.fluxer.com/privacy.md), our [legal bases](https://canary.fluxer.com/privacy.md), [where data is kept and how it is transferred](https://canary.fluxer.com/privacy.md), [how we protect it](https://canary.fluxer.com/privacy.md), [your rights](https://canary.fluxer.com/privacy.md) and [how we make changes](https://canary.fluxer.com/privacy.md) applies to this notice and the data it covers as well. ## 2. Signing in You sign in to Fluxer Feedback with your Fluxer account, and the site asks Fluxer only for your basic account details. It keeps your Fluxer ID, username, display name and avatar and updates them each time you sign in. It also keeps whether your account belongs to Fluxer staff and whether Fluxer has flagged it for spam. The site works out the age of your Fluxer account from your Fluxer ID. You can vote once your account is 7 days old, posts from new accounts may wait for review, and moderators and reviewers see the account's age next to reports and held posts. When you sign in, the site sends your IP address to Fluxer, which handles it as [section 2.2 of the privacy policy](https://canary.fluxer.com/privacy.md) says. The site uses the access that Fluxer gives it only once, to get your account details, and doesn't keep that access afterwards. A sign-in session lasts 30 days and keeps your browser's user agent string. If you use the site's API, each access token expires after at most 30 days. ## 3. What you post Fluxer Feedback keeps the bug reports, feature requests, comments and files that you post, together with every edit you make to them. It also keeps your votes, the posts you follow or mute, which posts you have read and your settings. When you report or reproduce a bug, the site keeps the platform, build and steps you give it. The build field starts out filled in with the name of your browser and operating system, and you can change it before you post your report. Before the site stores a file you upload, it removes metadata such as the location in a photo. If you mention someone by their username, they get a notification on the site, and notifications show who acted and quote what they wrote. If you link your GitHub account by posting a gist, the site keeps your GitHub username and ID and shows them on your profile, and our server checks the gist on GitHub. Accepted repros earn XP, and reviewers can offer extra XP as a repro bounty on a bug that nobody has been able to reproduce yet. XP is a points system with no monetary value, and it can't be exchanged for anything or turned into money. Report security issues through our [security page](https://canary.fluxer.com/security.md), not on Fluxer Feedback. Our legal basis for keeping this data is contract necessity ([section 3.1](https://canary.fluxer.com/privacy.md) of the privacy policy), because we need it to run Fluxer Feedback for you. ## 4. Who can see it Anyone can see your approved posts and comments, their edit history and files without signing in, and search engines can index them. Your profile shows everyone your name, username, avatar, the date you joined the site, any staff, moderator or reviewer badge, your posts, comments, accepted repros, XP and linked GitHub account. Only you can see which posts you voted for, and other people see only the number of votes on each post. Until a post that is waiting for review is approved, only you and the moderators and reviewers who handle the post can see it. Moderators look after the site, and some of them are Fluxer staff while others are members of the community. They can see deleted and hidden posts and comments, reports and who filed them, the notes moderators keep about accounts, and strikes. The person you report never sees that you reported them. The public [moderation log](https://feedback.fluxer.com/mod/log) lists moderator and reviewer actions with who acted and which account or post it was about. Only moderators can see the reasons for bans, role changes, removals and erasures of content, rejections and private reports. Our legal basis for moderating the site and being open about it is our legitimate interests ([section 3.1](https://canary.fluxer.com/privacy.md) of the privacy policy), and you can [object](https://canary.fluxer.com/privacy.md) to this. ## 5. Alerts in Fluxer Fluxer Feedback posts alerts about new posts, comments, status changes and repro bounties to channels in our Fluxer Labs community. An alert in a public channel shows the author's name, avatar and profile link with the post title and a short excerpt. Alerts in channels for moderators and reviewers also show posts and comments waiting for review, reports with their reason and the reported text, how old the author's Fluxer account is and what moderators did. Alerts in channels for moderators also show who filed each report and the note the reporter wrote with it. An alert about you can mention you so Fluxer notifies you. This is on by default, and you can turn each kind of mention off under "Mentions in Fluxer" in your settings. We keep a log of sent alerts for 30 days. You can ask us through the [privacy contact](https://canary.fluxer.com/company-information.md) to remove an alert already posted in Fluxer, which otherwise stays there when a post or an account on Fluxer Feedback is deleted. Alerts rest on our legitimate interest in keeping our community up to date on bugs and requests ([legal bases](https://canary.fluxer.com/privacy.md)). ## 6. Content copied to the site We copied issues, discussions, pull requests and comments from Fluxer's GitHub repositories to Fluxer Feedback, with the files attached to them. Each copy shows its author's GitHub username and links to the original, and the site keeps the author's GitHub ID and the number of thumbs-up reactions it had. The site keeps checking our GitHub repositories for new releases and pull requests and shows the GitHub username of each pull request's author. If you wrote something on GitHub that was copied, you can claim it by linking your GitHub account. We also copied the reports sent to the bug report bot that we used in Fluxer before Fluxer Feedback existed, together with the steps, settings and files in each report, the decisions that were made on it and the IDs of the Fluxer messages linked to it. We copied only those IDs, not what the messages said, and the site doesn't show them. If someone sent reports to the bot but has never signed in to the site, their profile shows the Fluxer username and avatar they had when we copied the reports. If their Fluxer account was already deleted by then, it shows "Deleted User" instead. Our legal basis for copying this content is our legitimate interest in keeping the history of our bugs and requests in one place ([section 3.1](https://canary.fluxer.com/privacy.md) of the privacy policy). To have copied content about you removed, or to object to the copying, use the [privacy contact](https://canary.fluxer.com/company-information.md). ## 7. Requests and IP addresses Fluxer Feedback doesn't store IP addresses in its database. Our edge servers and the servers that run the site log each request with your IP address, the page and the response, and when you're signed in, the site's own log also notes your account. No request log is kept longer than the security and usage logs in [section 7.4](https://canary.fluxer.com/privacy.md) of the privacy policy. To limit abuse, the site also counts requests by IP address, network and account in memory, and forgets those counts within 6 hours. Request logs and these limits rest on our legitimate interest in keeping the site secure and working. Our edge servers may keep a copy of a public page, and of the preview image for a shared link, as visitors who aren't signed in see them. A copy of a page expires within an hour and a copy of a preview image within 7 days, and pages that signed-in visitors see are never kept. When a post or comment is deleted or hidden, its copies are usually cleared within seconds, and if that fails they still expire at those times. The site loads no third-party scripts, fonts or analytics, and pages load images only from the site and Fluxer's servers. To draw the preview images for shared links, our server gets GitHub avatars from GitHub, and GitHub never sees your request. ## 8. Cookies Fluxer Feedback uses these cookies. Each one is needed for the site to work or remembers a setting you chose, and none of them tracks you. | Cookie | What it does | How long it lasts | | --- | --- | --- | | `__Host-bugs_session` | Keeps you signed in | 30 days | | `__Host-bugs_csrf` | Protects sign-in and forms from forged requests | 1 year | | `bugs_oauth` | Keeps track of a sign-in that is in progress | 10 minutes | | `__Host-flash` | Shows a one-time message after an action | 60 seconds | | `__Host-theme`, `__Host-width`, `__Host-tz`, `__Host-lang` | Remember the theme, page width, time zone and language you chose | 5 years | While you submit a post, the site keeps the page and form you were on in your browser's session storage, which your browser clears when you close the tab. ## 9. How long we keep it - Files you upload but never post are deleted after 24 hours. - Which posts you have read is deleted after 365 days. - After you delete your account, the site keeps your Fluxer ID with your moderation records for 30 days so that bans and holds still apply if you come back. A strike from those 30 days that wasn't lifted keeps your Fluxer ID with no time limit. - A ban keeps the banned Fluxer ID until the ban is lifted. Posts, comments, edit history, reports, notifications and XP have no fixed time limit, and we keep them until they are deleted as [section 10](https://canary.fluxer.com/feedback-privacy.md) describes. After an account is deleted, the moderation log, strikes and moderators' notes no longer show the account's name, and we keep them as our record of moderation decisions. A record of a linked GitHub account still has its GitHub username and ID, and a ban made before someone first signed in still has their Fluxer ID. Encrypted backup copies of the site follow [section 7.3](https://canary.fluxer.com/privacy.md) of the privacy policy. ## 10. Deleting and downloading your data "Download your data" in your settings gives a file with your profile, settings, posts, comments and linked GitHub account, plus details of your files, edits waiting for review, your suggestions, the posts you follow and voted for. For anything else we keep about you, such as your XP, repros or edit history, use the [privacy contact](https://canary.fluxer.com/company-information.md). When you or a moderator delete a post or comment, it disappears from the site, and you can ask us through our [privacy contact](https://canary.fluxer.com/company-information.md) to have it erased with its edit history and files. Until it's erased, moderators can still see it and restore it. "Delete account" in your settings removes your username, display name and avatar from the site, removes your Fluxer ID except as [section 9](https://canary.fluxer.com/feedback-privacy.md) says, and signs you out everywhere. It also deletes your votes, follows, notifications, the reports you filed, your suggestions, your edits that are waiting for review and your linked GitHub account. Your posts and comments stay on the site with their text, files and edit history, but without your name. If you check "Also erase everything I posted", they are erased with their edit history and files. A banned account can't check this box, and you can always ask us to erase your content through the privacy route instead. Deleting your Fluxer account doesn't delete your Fluxer Feedback account or what you posted there. Delete your Fluxer Feedback account first, because you can't sign in to the site once your Fluxer account is deleted. If your Fluxer account is already deleted, ask us to delete your Fluxer Feedback account through the [privacy contact](https://canary.fluxer.com/company-information.md). --- Canonical page: https://canary.fluxer.com/feedback-privacy Last updated on November 1, 2026