Privacy policy

Last updated 28 August 2026. Written with POPIA in mind.

What we collect

• Your account: email address, a username, optionally a display name, and a hashed password if you did not sign in with Google.
• What you write: posts, comments and community details.
• Community activity: which communities you belong to, and your role in them.
• Page views: counted per community per day. Signed-out views are counted against a salted hash of your IP address and browser, never the address itself, and the hash exists only to avoid counting one person twice in a day.
• Payments: when payments are switched on, the last four digits and brand of a card, and a Paystack token that lets us charge it again. We never see or store the full card number.

What we do not collect

• No advertising trackers, and no third-party analytics scripts.
• No location beyond what an IP address implies, which we do not store.
• No contact list, no device identifiers.

Who else sees it

• Supabase hosts the database (EU region).
• Cloudflare serves the site.
• Resend sends the emails we send you.
• Google, only if you choose to sign in with it.
• Paystack processes payments, when payments are switched on.

We do not sell your data, and we do not share it with anyone else except where the law requires it.

Where it lives

On servers in the European Union. Cloudflare does not place the real-time infrastructure this product needs in Africa, so keeping the database beside it in the EU is a technical necessity rather than a preference. POPIA permits this where the receiving country has comparable protection; the EU does.

Your rights

Under POPIA you can ask us to:

• show you what we hold about you;
• correct anything that is wrong;
• delete your account and personal information.

Email hello@needeverything.com and we will action it. Deleting your account removes your personal information. Posts you made in someone else’s community may remain, with your name removed, so that conversations other people took part in do not collapse.

Records we are legally required to keep — payment records in particular — are kept for as long as the law requires, even after an account is deleted.

Cookies

Only what signing in requires: a session cookie, and short-lived cookies that protect the sign-in form from being submitted by another site. No advertising or tracking cookies, which is why this site has no cookie banner.

Children

This platform is not for under-18s, and we do not knowingly collect their information.

Complaints

Email us first. If we do not resolve it, you can complain to the Information Regulator of South Africa.