Privacy Policy
Last updated 28 October 2026
This is what the BBS Directory (bbsdirectory.org), run by 2600.network, collects about you, why, and what we do with it. In short: as little as we can, never sold, never used for ads.
If you just browse
Our web server logs each request: your IP address, the page, the time and your browser's name. We use these logs to keep the site running and stop abuse, and they are rotated away after a short time. There are no analytics, ads or third-party trackers.
The site is served through Cloudflare, which handles your connection on our behalf under its own privacy policy.
If you have an account
- your email address, and the name or handle you give us, if any
- your password, stored only as a one-way hash we can't read back
- for two-factor sign-in, its secret key (encrypted) and your recovery codes (hashed)
- for each signed-in browser: its IP address, browser name and when it was last used, so you can sign out of it and we can spot misuse
- sign-in, sign-up and reset attempts (IP address, email typed, time), kept 7 days to stop password guessing
- what you post: descriptions, corrections, submissions and claims, with who made them and when
Your email address is never shown on the site. If you claim a board, its listing may show your name or handle as its sysop.
Cookies
Two, both needed for the site to work: one keeps you signed in, the other protects forms from being submitted by other sites. Neither tracks you anywhere else.
We only email you about your account: confirming your address, password resets, security notices (a new password, two-factor turned on or off) and your claims. No newsletters, no marketing. Mail is sent through Proton Mail.
Sharing
We don't sell or rent your information. We share it only with the services that run the site for us (hosting, Cloudflare, Proton Mail) as far as they need it, or when the law requires.
About the boards
Listings describe boards, not people: what anyone can see by calling a board (its name, addresses, software, its welcome screen, whether it answers). A sysop name in a listing is the name the board itself shows or its sysop gave us.
Keeping and deleting
Account information is kept while your account exists. Ask us to delete it ([email protected]) and we will, except what you posted to listings (see the Terms) and anything we must keep by law.
Security
Passwords are hashed with Argon2id, two-factor secrets are encrypted, and sign-in is rate-limited. The retro version of the site works over plain HTTP for old computers; anything typed there, including a password, travels unencrypted, and the site says so where it matters.
Changes
If this policy changes in a way that matters, we will email account holders first.