Legal

GDPR Compliance

Threadline is built privacy-first. Here is how we support GDPR rights for commenters and publishers.

Rights for commenters

Right to Access (Art. 15)
Dashboard → Settings → export shows all data we hold about you.
Right to Rectification (Art. 16)
Edit your display name, bio, and email in account settings.
Right to Erasure (Art. 17)
Delete your account. Comments are anonymized to preserve thread context.
Right to Portability (Art. 20)
Export all personal data as JSON from your dashboard.
Right to Object (Art. 21)
Opt out of analytics per-site or contact privacy@threadline.io.
Right to Restrict Processing (Art. 18)
Account closure pauses processing until you reactivate.

For publishers

When you embed Threadline, you are the data controller for visitor comments. Threadline acts as your processor.

Data Processing Agreement

Standard GDPR Art. 28 template (Markdown). Complete the signature block, then email privacy@threadline.io for a countersigned copy.

Get the DPA

Full technical guide: Developer GDPR documentation