How do you handle copyright and DMCA?

We honor DMCA takedowns. If a project on BreakPoint infringes your copyright, email dmca@breakpoint.network with the standard DMCA notice (identification, location, contact, good-faith statement, signature). We remove within 24 hours. The original submitter is notified.

What are the terms of using BreakPoint?

You retain copyright on everything you submit. You grant us a worldwide, royalty-free, non-exclusive license to display, distribute, and promote your project on BreakPoint. You can revoke this license at any time by removing the project. You agree not to submit projects you don't have the right to submit, not to use BreakPoint for spam or harassment, and not to abuse the adoption mechanism for paid placements.

Trust

Open by default. Secure by design. Quiet about your data.

Q: Where is my data stored?

Project data, user data, and analytics are stored in Cloudflare D1 (SQLite at the edge). Encrypted at rest by Cloudflare. Backed up daily. We do not use Google Analytics, Mixpanel, Segment, or any third-party analytics platform — we run our own analytics in D1 with hashed client IDs.

Q: Do you share or sell my data?

Never. We do not share, sell, or aggregate your data with any third party. The only emails we send are the ones you opt into (transactional magic links, the Monday digest, audit reports). The only sharing is public projects you explicitly submit, which are visible to anyone with the link.

Q: What happens if BreakPoint shuts down?

We commit to a 90-day public notice, an export tool, and a one-click download of all your data (projects, comments, profile) as a JSON archive. The platform's data schema and migrations are open source (AGPL), so anyone can fork the platform. We also have a public roadmap so you can see where the platform is going.

Q: Do you use cookies? GDPR? CCPA?

We use one first-party session cookie (HMAC-signed, 30-day, no third-party cookies). The cookie is for the magic-link sign-in and to remember your UI state. No tracking pixels, no third-party analytics, no Facebook/Twitter/Google retargeting. GDPR-compliant: we collect the minimum data, we have a clear privacy policy, you can delete your data on request. CCPA: same. We do not sell personal data.

BreakPoint is built for adoption — that means we publish the rules. Here's exactly what we do, and don't do, with your data.

Our 5 promises

✓

We don't sell your data

Never. Not aggregated, not anonymized, not in any form. We make money from paid engagements, not from your data.

✓

No third-party trackers

No Google Analytics, no Mixpanel, no Segment, no Facebook Pixel, no retargeting. We run our own first-party analytics in D1. What a pageview actually stores is the page, the referrer, your country and whether you are on a phone or a desktop — no cookie, no client identifier, and no IP address. Cookie-free except for one HMAC-signed session cookie.

✓

You can export your data

At any time, one click, full JSON archive of your projects, comments, profile. Email [email protected] and we'll send it within 24 hours.

✓

You can delete your data

One click from your dashboard, or email [email protected]. Permanent, irreversible, within 24 hours. GDPR right-to-erasure compliant.

✓

We're open source where it matters

The data schema, the migrations, the migration scripts, and the core platform are AGPL-licensed. Anyone can fork. If we shut down, the platform continues.

Security

Infrastructure: Cloudflare Workers + D1. Edge runtime, serverless, auto-scaling. All traffic over HTTPS (HSTS preloaded). Encrypted at rest by Cloudflare's default D1 encryption.
Authentication: Magic-link sign-in only. No passwords to phish. HMAC-signed session cookie (30-day, HttpOnly, Secure, SameSite=Lax). No OAuth, no third-party auth providers, no password reset flows to attack.
Rate limiting: Magic-link requests: 1 per email per 60s, 5 per IP per hour. Newsletter: per-IP throttled by Cloudflare edge. No public write APIs without auth.
Authorization: Project edit/delete: original submitter only. Adoption: anyone signed in, first-come-first-served, no manual review. Comments: any signed-in user, no anonymous posting.
Disclosure: Found a security issue? Email [email protected] with details. We respond within 24 hours, fix within 7 days for critical issues.

Frequently asked questions

Where is my data stored?

Cloudflare D1 (SQLite at the edge). Encrypted at rest. Backed up daily. We don't use any third-party analytics platform.

Do you share or sell my data?

Never. The only sharing is public projects you explicitly submit, which are visible to anyone with the link.

What happens if BreakPoint shuts down?

90-day notice, full data export, AGPL-licensed schema and migrations so anyone can fork.

Do you use cookies? GDPR? CCPA?

One first-party HMAC session cookie. No third-party cookies. GDPR + CCPA compliant. Right to erasure, right to export, right to opt out of all emails.

DMCA and copyright?

We honor DMCA. Email [email protected]. We remove within 24 hours.

What are the terms?

You retain copyright. You grant us a license to display your project. Revoke anytime by removing. No spam, no harassment, no paid placement abuse.

Contact

Security

Privacy

DMCA

Data export / delete