# Data Handling

> The mechanics behind the Privacy Policy: where your data lives, who can read which fields, how long we keep it, and what persists by design.

- **Web:** https://ichabod.dev/data-handling
- **Last updated:** July 22, 2026

## Sections

- **Where data lives** — the hosted services holding it.
- **Access controls** — row-level security, the public views that exclude gated fields, and server-side role resolution.
- **What is public vs. private** — field by field.
- **Retention and deletion** — what deletion removes and what survives it.
- **Security** — how access is limited and reviewed.

## The short version

Public surfaces read through views that exclude the gated fields, so a contact email or a "what's next" blob cannot leak into markup or an API payload. Deleting your account removes your public listing; unlocks, sent introductions, and transaction records persist by design.

This is a summary written for machine readers. The page at https://ichabod.dev/data-handling is the authoritative text. Last updated July 22, 2026.