Privacy

GroupHub is a public directory of Telegram groups and channels, Discord servers, WhatsApp communities and Signal groups. This notice explains how we handle information when you browse, create an account, submit listings, report a problem or contact us.

GroupHub is responsible for the information it processes to operate this directory. Our privacy contact is [email protected]. This notice covers GroupHub; linked platforms and community operators have their own privacy practices.

• Account and authentication information: email address, account identifier, password authentication records, email confirmation and sign-in status, and authenticator configuration if you enable it. Passwords are handled by the authentication service; do not send them to support.
• Profile information: a username, display name, avatar URL and biography you choose to provide, together with account status, permissions and relevant activity timestamps.
• Directory information: titles, descriptions, public invitation URLs, platform, category, tags, language, location and NSFW labels, and available community statistics. We obtain this from submissions, publicly accessible invitation pages and public link directories; we do not read private community conversations to build listings.
• Reports and correspondence: the affected listing, report reason, details you provide, your account association when reporting, support messages and moderation outcomes.
• Operational information: request references, timestamps, security and error records, anti-abuse limits and, when counting is enabled, limited information used to avoid counting the same visit or click repeatedly. Infrastructure services also process network information needed to deliver requests.

You can browse public listings without an account. An email address and authentication credentials are needed for account features; optional profile fields are not required. Avoid putting private contact details, identification documents or other sensitive information in listing text, profiles or reports.

We use information to provide accounts and login verification, publish and organize community links, process submissions and reports, communicate about requests, protect the service from abuse, troubleshoot failures and maintain reliable directory statistics.

Where data protection law requires a legal basis, account services are provided to perform our agreement with you; security, proportionate moderation and directory maintenance rely on our legitimate interests in running a useful and safe service; required disclosures or preservation rely on applicable legal obligations. If an optional activity requires consent, we will seek that consent separately. Agreeing to the Terms is not blanket consent to unrelated uses of personal information.

We do not sell personal information or share it for advertising across websites. The current service does not use advertising trackers, third-party marketing analytics or a device fingerprint to build a profile of you.

Published listing descriptions, invitation links, labels and community statistics are public. They may appear in search results and our sitemap, and third parties may copy or index them. Correctly labeled NSFW listings are included in public discovery.

Account email addresses, authentication information, reporter account references, report descriptions and internal moderation notes are not included in public listing data. Authorized personnel can access relevant information to operate accounts, investigate abuse and handle requests. Optional profile information is available to you and authorized account administrators; providing it does not create a public profile page.

Information you write into a public listing is public even if it is personal. Removing a listing from GroupHub does not automatically remove copies held by search engines, other websites or the community platform.

We use essential cookies for authentication, session refresh, email confirmation, password recovery and completion of the sign-in steps. Pending sign-in state lasts up to 10 minutes. The cookie that tracks an email confirmation or password recovery request lasts up to one hour and is cleared when the email-link callback is processed. The completed-login marker lasts for the browser session. Authentication session cookies have their own renewal and expiry rules. Some login cookies contain an account reference or email address used to check that the steps belong to the same account.

Browser session storage may keep a recent action reference, page path and timestamp so a tab can show that a form was saved after a refresh. It does not store the submitted form text and is not used as proof of identity. Clearing or blocking essential storage can prevent login, recovery or account features from working.

When aggregate counting is enabled, we derive a keyed, pseudonymous value from the network address supplied by a trusted hosting proxy and keep a temporary record to prevent repeated counting. The application's counting records do not store the raw IP address, browser user agent, referrer or a detailed browsing history. Aggregate view and outbound-click totals may remain with a listing. Hosting and authentication logs are separate from these counting records.

Submissions and reports are checked for invitation format, duplicate links, blacklisted destinations, risky text, account status and activity limits. Configured rules can block a submission, send it for review, approve an eligible listing, close an unresolved edit request or escalate and resolve reports. These actions affect directory visibility and access to features.

We do not use these checks to infer your membership of a community or make credit, employment or similar assessments. If you think a rule or moderation decision is wrong, request human review using the appeal process. Include the listing URL and available reference so we can locate the decision.

Hosting, database, authentication and transactional email services process the information needed to deliver the service. A verification or recovery email necessarily discloses your email address to the mail service. Public listings are shared with visitors and may be indexed by search engines.

We may disclose relevant information where legally required, to investigate fraud or safety incidents, or to establish or defend legal claims. A complaint's relevant substance may be shared with an affected submitter or rights holder to investigate a dispute; we limit personal information to what is necessary. Reports are not published as public comments.

Opening an external invitation sends you to a separate platform. That platform receives the network and browser information involved in your request and any information you subsequently give it. GroupHub does not control its cookies, membership records or conversations.

Account information is kept while your account is available, subject to deletion requests and justified security or legal retention. Public directory information is kept while the listing remains useful and lawful. Reports, review history and correspondence may be retained while an issue is active and afterward where needed to prevent repeated abuse, document decisions or resolve legal claims. We assess deletion requests for these records individually.

The current scheduled cleanup windows for temporary operational records are:

• Repeated-count prevention: 48 hours after the most recent counted interaction.
• Submission and report limit records: 8 days after creation.
• Action confirmation records used to reconcile retries: at least 7 days after creation and until their validity period has expired.
• Administrative audit and completed maintenance records: 180 days.

These are eligibility windows for scheduled cleanup, not a promise of instant deletion at the exact cutoff. A failed or delayed cleanup run can postpone removal. Backup and infrastructure copies follow separate retention cycles; where a copy is retained for recovery or legal preservation, it should not be used to restore ordinary access to a deleted account. Aggregate totals are not automatically reset by deleting an account.

To delete your account, use Account settings, sign in again if asked and type DELETE to confirm. A successful request immediately closes protected account access and clears the account profile fields. Deletion of the authentication account is processed separately; a confirmation that access is closed does not mean that every deletion step is complete.

Published and previously published listings are detached from your account and retain their applicable moderation state. Submissions that were never published are withdrawn from the directory. Reports and historical decisions can remain with account references removed. Personal details in listing text, report descriptions or retained records are not automatically erased by removing an account association.

For removal of a listing or personal information within it, make a separate privacy or removal request. Contact support if you cannot sign in, deletion needs attention, or you need us to assess retained material.

You can edit supported profile fields in Account settings, manage eligible submissions in My submissions, sign out and clear browser storage. For access to or a copy of personal information, correction, erasure, restriction or portability where applicable, email [email protected].

You may object to processing based on legitimate interests. Tell us which information or activity concerns you. If we rely on consent for an optional activity, you may withdraw it without affecting processing that was lawful before withdrawal. Your rights and any exceptions depend on applicable law; you can also complain to the relevant data protection authority.

We may ask for proportionate proof that a request relates to you, preferably through your account email. We will respond within applicable legal time limits and explain any permitted extension or refusal. Do not send your password, login code, authenticator secret or identity documents unless we have agreed on a necessary, secure verification method.

We use authentication, access controls and separation of public and restricted information to reduce unauthorized access. No online service can eliminate every security risk. Keep your email account secure, use a unique password and consider enabling an authenticator app. Report suspected incidents using our security contact.

Processing by infrastructure services may take place outside your country. Where applicable law requires a transfer mechanism or safeguards, those requirements apply to the relevant processing. Contact our privacy mailbox to ask about transfers or applicable safeguards. Access to those details on request does not waive any information we are legally required to provide to you.

GroupHub is intended for people aged 18 or older and is not directed to children. NSFW destinations may have a higher local age requirement. If you believe a child has provided personal information through GroupHub, contact us so we can investigate and take appropriate action.

We update this notice when the service or its information practices change. The date above identifies the current version. Material changes that require notice or consent will be handled as required by applicable law. Questions about this notice can be sent to [email protected].