Privacy Policy
Last updated 3 June 2026
This policy explains what data Domestique Debate (debate.domestiquecycling.com) collects, why, and the choices and rights you have. It covers the debate subdomain only; the main Domestique site has its own policy.
Who we are
Domestique Debate is operated by Domestique Cycling, the data controller for the information described here. The platform lets you vote on cycling statements and discuss them with other readers. If you have any privacy question, see Contact.
What we collect
We collect only what we need to run accounts and the debate:
- Account data — your email address, a username (no real names required), and a securely hashed password. We never store your password in readable form.
- Activity — your votes, comments, comment votes, likes, and any reports you submit.
- Technical data — basic server logs (IP address, browser type, timestamps) used for security and abuse prevention.
How we use it
We process your data on these legal bases (UK/EU GDPR):
- Contract — to create and operate your account, record your votes and comments, and show your activity.
- Legitimate interests — to keep the platform secure, prevent spam and abuse, and improve the service.
- Consent — to load personalised advertising and set non-essential cookies. You can withdraw consent at any time.
Cookies & advertising
We use one essential cookie to keep you signed in — it is required for the site to work and is not used for tracking. With your consent, we also load advertising via Google Ad Manager, which may set its own cookies. You can choose “essential only” in the cookie banner, and change your mind later by clearing the choice.
Who we share it with
We do not sell your personal data. We share it only with the service providers (processors) that help us run the platform, each bound to protect it:
| Provider | Purpose | Region |
|---|---|---|
| Railway | Application hosting & PostgreSQL database | EU/US |
| Cloudflare R2 | Image storage (debate cover images) | EU/US |
| Cloudflare Turnstile | Bot/abuse protection at sign-up | EU/US |
| Resend | Transactional email (verification, password reset) | US |
| Google Ad Manager | Advertising (only with your consent) | US |
Your votes are anonymous to other users — only aggregate results are shown. Comments are attributed to your username only; we never publish your email or real name.
How long we keep it
We keep your account data for as long as your account exists. When you delete your account, your personal data, votes, comments, likes, and reports are removed promptly. Security logs are kept for a short period and then deleted. Aggregate, anonymised vote totals may be retained.
Your rights
Subject to applicable law, you can request to access, correct, export, restrict, or object to the processing of your data, and you can withdraw consent at any time. You can:
- Update your username and password, or permanently delete your account and all associated data, from your account page.
- Request a copy of your data, or raise any other request, via Contact. You also have the right to lodge a complaint with your local data protection authority.
International transfers
Some providers above process data outside your country (e.g. the US). Where that happens, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.
Security
Passwords are hashed with a modern algorithm (Argon2), traffic is encrypted in transit (HTTPS), and access to systems is restricted. No system is perfectly secure, but we take reasonable measures to protect your data.
Children
Domestique Debate is not directed at children under 16. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will remove it.
Changes to this policy
We may update this policy as the platform evolves. We will revise the “last updated” date above, and for significant changes we will provide a clearer notice.
Contact
For any privacy request or question, email the Domestique team at team@domestiquecycling.com.