Privacy policy
When you leave a comment, we collect your name, email, IP address, and browser string mostly to filter spam. Your email may be hashed and sent to Gravatar to fetch your profile picture; see their privacy policy at https://automattic.com/privacy/. Approved comments show your photo publicly.
Before uploading images, remove any GPS/EXIF location data. Visitors can download images and extract that data.
Commenting lets you save your name, email, and site in cookies for a year so you don’t re-enter them. The login page sets a short-lived cookie just to check cookie support no personal data, gone when you close the browser. Logging in sets session and display cookies (2 days and 1 year respectively). “Remember Me” extends login to two weeks; logging out clears those cookies. Editing a post saves a cookie with only the post ID it expires after 1 day.
Posts may embed content from other sites (videos, images, etc.). That content behaves as if you visited those sites directly and may track you, especially if you’re logged in there.
Password reset emails include your IP address.
Comments are kept indefinitely for spam moderation. Users can edit or delete their profile info anytime (except usernames). Admins can view and edit it too.
You can request an export or deletion of your personal data. We’ll keep anything we’re legally required to hold.
Comments may pass through an automated spam filter.