Privacy Policy

How Behuve collects, uses, and protects your information.

Who We Are

Behuve was created by Noah Wong and Arnav Tripathy in 2026. It is a running record of research we are doing and tools we are building from it.

Information We Collect

Account information. When you sign in with GitHub or Google, we receive your email address, display name, and which provider you used. This is stored in our database and used to identify you as the author of comments.

Comments. If you post a comment, we store the text of your comment, the post it was left on, and your email address for attribution.

View counts. When you visit a post, we record that a view occurred. To avoid counting the same visit more than once per day, we compute a non-reversible fingerprint from your IP address and browser information (the same mechanism used for like deduplication) and store it server-side. No raw IP address or personal information is stored.

Like deduplication. To prevent duplicate likes, we compute a non-reversible fingerprint from your IP address and browser information using SHA-256 hashing with a rotating server-side seed. This hash cannot be reversed to identify you and is not linked to your account.

Cookies

We use two types of cookies:

Authentication cookie (bv_session). A signed session token set when you log in. Expires after 30 days. This cookie is required to maintain your logged-in session. It is marked HttpOnly and Secure and is not accessible to JavaScript.

OAuth state cookie (temporary). Created during the login flow to prevent cross-site request forgery. Deleted immediately after login completes.

Third-Party Services

GitHub. If you sign in with GitHub, authentication is handled by GitHub's OAuth service. GitHub's privacy policy applies to that interaction.

Google. If you sign in with Google, authentication is handled by Google's OAuth service. Google's privacy policy applies to that interaction.

Cloudflare. The site is hosted on Cloudflare Pages and Workers. Your data is stored in Cloudflare D1. Cloudflare may process your IP address and request metadata as part of serving the site. Cloudflare's privacy policy applies.

How We Use Your Data

We use the information we collect to display your name next to your comments, maintain your logged-in session, and deduplicate post views and likes. We do not sell, rent, or share your data with third parties beyond what is described in this policy.

Data Retention

Account data and comments are retained until you request deletion. To request removal, reach out to us directly and we will remove them promptly.

Your Rights

If you are located in the European Economic Area, you have the right to access, correct, or erase your personal data; to object to or restrict processing; and to data portability. To exercise any of these rights, contact us directly.

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the effective date at the top of this page.

Contact

For any questions about this policy, data requests, or anything else, reach out to either of us directly.

Noah Wong — noaheverestwong@gmail.com
Arnav Tripathy — aatripathy.07@gmail.com

← Home Behuve