Privacy Questions and Answers

This notice describes how Civilized Discourse Construction Kit, Inc., or CDCK for short, collects and uses data about you.

Jump to:

What is CDCK?

CDCK is the company home and primary developer of Discourse, open source software for hosting Internet discussion forums. As a company, CDCK hosts forums using Discourse for customers, as well as:

CDCK sets only its own privacy practices, not the privacy practices of CDCK customers or others who host Discourse forums for themselves or others. You should ask all of those involved in administering and hosting Discourse forums that you use for information about their privacy practices.

How does CDCK collect data about me?

CDCK collects data about you:

CDCK collects data when you use forums that Discourse hosts, whether you use the forums using a web browser on your own computer, or use CDCK’s Discourse apps for mobile devices.

CDCK does not buy or otherwise receive data about you from data brokers.

What data does CDCK collect about me, and why?

CDCK collects data about visits to forums.

When you visit a forum that CDCK hosts, whether you have an account or not, the forum uses cookies, server logs, and other methods to collect data about what pages you visit and when.

CDCK uses data about how you use the website to:

CDCK usually stores data about how you use the forum in identifiable form for just a few weeks. In special circumstances, like extended investigations about technical attacks, CDCK may preserve log data longer, for analysis. CDCK stores aggregate statistics about use of the forum for as long as CDCK hosts the forum, but those statistics don’t include data identifiable to you personally.

CDCK collects account data.

Many features of forums that CDCK hosts require a forum account. For example, most forums that CDCK hosts require an account to post and reply to topics.

To sign up for a forum account, Discourse requires your name, a user name, and an e-mail address.

CDCK uses your account data to identify you on the forum and to create pages specific to you, such as your profile page. If the forum is public, CDCK publishes your account data according to the forum administrator’s configuration. If the forum is access-restricted, CDCK makes your account data available to everyone who can access the forum, according to the forum administrator’s configuration.

CDCK uses your e-mail address to:

You may provide additional data for your account, like a short biography, your location, or your birthday, on the profile settings page for your account. CDCK makes that data available to others who can access the forum. You don’t have to provide this additional information, and you can erase it at any time.

CDCK stores your account data as long as your account remains open.

CDCK collects data about posts and other activity on the forum.

CDCK collects the content of your posts, plus data about bookmarks, likes, and links you follow in order to share that data with others, through the forum. If the forum is public, CDCK publishes your activity. If the forum is access-restricted, or access restrictions apply to the specific post, CDCK makes your activity available only to users permitted to see it.

CDCK also collects data about private messages that you send through the forum. CDCK makes private messages available to senders and their recipients, and also to forum administrators.

CDCK stores your posts and other activity as long as your account remains open.

CDCK uses cookies.

HTTP cookies are small bits of data that websites, like Discourse forums, send to your computer when you visit. When you return to those websites, your computer sends the cookies on your computer back to the website.

Have a look at the privacy notice for your specific forum to find out which cookies that forum uses. By default, all Discourse forums use these cookies:

Name Essential Expires Purpose
email Yes Session remembers your e-mail as you create an account
destination_url Yes Session helps redirect you to your requested page after logging in
sso_destination_url Yes Session helps redirect you to your request page after single sign on
authentication_data Yes Next Page View temporarily stores user information during login flows
theme_key Yes Forever remembers your theme personalization if you don’t tick “Make this my default theme on all my devices”
cn Yes Next Page View temporarily stores notification read state
_bypass_cache Yes Session allows the server-side cache to be bypassed during login flows
_t Yes 1440 Hours remembers who you are when you log in
_forum_session Yes Session associates an ID, and other security-related information, with your browsing session
dosp Yes Next Page View enables client denial of service protection, a security protection
__profilin No Session used by software developers to bypass rack-mini-profiler

Discourse forums that configure Google Analytics, such as, also use cookies from Google. Refer to Google’s page on Google Analytics cookies for the latest details.

Discourse forums that serve advertisements, such as with the ads plugin, may also set cookies used to track you and serve advertisements.

Your web browser can show you the cookies you have for any website and help you manage them.

How can I make choices about data collection?

You can make choices about how data about you is used on the settings page for your account. When a forum uses access restrictions that vary by category, you can choose who will see your post by choosing the appropriate category.

Most web browsers let you make choices about whether to accept cookies, for specific websites or more generally. has instructions for many different web browsers. and have more information specifically about cookies used for advertising.

CDCK does not respond to the Do Not Track HTTP header.

Where does CDCK store data about me?

Most forums that CDCK hosts store data in CDCK’s data centers and Amazon Web Services S3 in the United States. Some forums that CDCK hosts store data in data centers in other jurisdictions, such as Canada and the European Union. Refer to the Privacy Policy of the forum on which your account exists for detailed information.

Does CDCK comply with the EU General Data Protection Regulation?

CDCK respects privacy rights under Regulation (EU) 2016/679, the European Union’s General Data Protection Regulation (GDPR). Information that GDPR requires CDCK to give can be found throughout this privacy notice. So can information about specific rights, like access, rectification, erasure, data portability, and objection to automated decision-making.

What about Schrems II?

The July 16, 2020 ruling of the Court of Justice of the European Union in case C-311/18, known as “Schrems II”, invalidated the US-EU Privacy Shield program as a legal basis for “exporting” personal data about EU residents outside the EU. The decision turned on concerns about United States national security and surveillance laws, such as section 702 of the Foreign Intelligence Surveillance Act, that might affect personal data of EU residents. Schrems II confirmed that standard contractual clauses could still be a legal basis for exporting data, but cast doubt on whether signing those clauses with companies subject to US law would provide enough practical protection to EU residents.


Does CDCK comply with the California Consumer Privacy Regulation?

CDCK respects the rights of California residents under the California Consumer Privacy Regulation. CDCK does not sell your personal information within the meaning of that regulation. Other information that CCPA requires CDCK to give can be found throughout this privacy notice. So can information about specific rights, like requesting disclosure about information CDCK collects and requesting deletion of your data.

Where can I access data about me?

You can see your account data at any time by visiting your account page on the forum. Your account page also lists your posts and other activity on the forum.

Your account activity page also includes a link to download all of your activity in standard comma-separated values format.

How can I change or erase data about me?

You can change your account data at any time by visiting the profile settings page for your account. The settings for a particular forum may also allow you to close your account, on the settings page for your account. Closing your account starts a process of erasing or anonymizing CDCK’s records of data you provided for your account. Forum administrators can also erase and anonymize accounts.

Depending on the settings for your particular forum, you may also be able to edit, anonymize, or erase your posts. When you edit posts, CDCK will keep all versions of your posts. Forum administrators can view old versions of posts, and optionally make them visible to other forum visitors.

Does CDCK make automated decisions based on data about me?

CDCK classifies posts as spam automatically.

CDCK uses data about your posts and other activity on many forums to make automated decisions about whether your posts to and most forums that CDCK hosts are spam. When Akismet decides that a post is likely spam, the forum refuses to accept the post.

If you think a post has been wrongly blocked or removed, contact an administrator of your forum. They can override the decision that a post was spam.

CDCK uses data about posts and activity to set trust levels automatically.

Depending on how administrators of your forum configure the forum, the forum may use data about your posts and activity to award you badges and calculate a trust level for your account. Your trust level may affect how you can participate in the forum, such as whether you can upload images, as well as give you access to moderation and management powers in the forum. Your trust level therefore reflects forum administrators’ confidence in you, and their willingness to delegate community management functions, like moderation.

If you think your trust level has been set incorrectly, contact an administrator of your forum. They can manually adjust the trust level of your account.

Does CDCK share data about me with others?

CDCK shares account data with others as mentioned in the section about account data.

CDCK shares data about your posts and other forum activity with others as mentioned in the section about forum data.

Apart from making data available to the customer that pays CDCK to host a forum, CDCK does not sell or give information about you to other companies or services. However, CDCK does use services from other companies on some forums that it hosts. The companies behind those services may collect data about you on their own, for their own purposes. Some of these services may be used to collect information about your online activities across different websites.

CDCK uses the subprocessors listed on our subprocessors page.

Other individuals and companies may also reuse data about you that CDCK publishes, such as your posts to public forums.

How does CDCK document compliance for forum hosting customers?

CDCK provides a standard data processing addendum for European Union General Data Protection Regulation compliance on request. The addendum incorporates the non-EU/non-EEA processor standard contractual clauses of Commission Decision 2010/87/EU for any regulated transfers.

CDCK also provides a standard addendum for compliance with the California Consumer Privacy Act on request.

How can I contact CDCK about privacy?

You can send questions and complaints to:

Civilized Discourse Construction Kit, Inc

European Users with questions or complaints about GDPR compliance should also address CDCK’s representative in the Union:

M. Régis Hanol Civilized Discourse Construction Kit, Inc. 78 Allée Primavera Centre UBIDOCA, 15232 74370 ANNECY FRANCE

For complaints under GDPR, European Union users may lodge complaints with their local data protection supervisory authorities.

How can I find out about changes?

This version of CDCK’s privacy questions and answers took effect December 13, 2021.

CDCK will post the next version at CDCK may change how it announces changes in future versions.

In the meantime, CDCK may update its contact information without announcing a change. Please refer to for the latest contact information at any time.