Skip to content
GreatPosts

GreatPosts privacy notice

Last updated 5 November 2026.

GreatPosts lets people give each other Community Diamonds for Threads posts. You tag @greatpost_buddy under a post, the bot asks the post’s author, and only if the author says yes is the Community Diamond awarded. GreatPosts is run by Dented Printer, Ontario, Canada (contact: dylan@dentedprinter.com). This notice is for greatpost-buddy.net, the @greatpost_buddy bot and the GreatPosts Diamonds browser extension.

The short version

What we collect and why

Visitors. Like any website, our web host receives your IP address, browser details and the page you asked for, and keeps them in access logs for about 7 days to run and secure the site. Reading the site sets no tracking cookies.

People who sign in. For each connected platform: its app identifier, account identifier and current username; a separate GreatPosts account identifier; sign-in and session dates; the account terms version and when you accepted it; and the individual posts you choose to feature on this website. Session credentials are stored as hashes. The Threads access token is used during sign-in to verify your profile and check a bounded list of your own recent posts, and is then discarded, except for the tag lookup below.

You confirm the account terms and this notice on our page before being sent to Threads; nothing is created if you do not. That confirmation is kept in your browser session for up to fifteen minutes and recorded with your account when it is first created. Signing in with a platform that already belongs to an account never merges accounts, and a platform account can belong to only one GreatPosts account. You can remove a connection in your account, but never the last one.

People who give Community Diamonds. When you tag @greatpost_buddy, the bot sees your tag, your Threads username, the post you tagged and the words you wrote. We keep your default design and choices, your offers and their status (your history), and counters that apply the daily limits. Your choice of whether your name shows is a setting in your account.

People who receive a Community Diamond (no account needed). The bot reads the replies to its own posts to see your answer: YES or a thumbs up, NO or a thumbs down, “stop”, “start” or “withdraw”. We store the reply and consent identifiers and times, your answer, the post and its author, and what is needed to remove the bot’s posts again. If you opt out we keep only a keyed one-way hash (HMAC-SHA256) of your username, used solely to honour that choice; it cannot be turned back into your username. After a removal, the public record is reduced to a hashed post reference so the same post is not invited again.

How the bot works with Threads content

The bot only acts when someone tags it, and only on that tag, its own posts and the replies to them. Posts are shown through Threads’ own embed; we do not copy or redistribute post text or media returned by the Threads API. After an author accepts, a card is made for the Community Diamond: an image and a short video that include the original post as Threads displays it, the Community Diamond and the public attribution. Private notes and email addresses are never part of the card.

Words you add when you tag the bot

If you add words when you tag @greatpost_buddy, the bot repeats them in its public request to the post’s author. Your Threads username is shown with your Community Diamonds unless you turn off “Show my name on Community Diamonds I give” in your account; then they say “Someone”. Links and @mentions are removed and the message is limited to 480 characters (shortened in the request if needed). If the author accepts, the bot also posts your message under its announcement. Tagging with no words sends an anonymous request. The message is kept with the offer in your history until you delete it or your account.

Finding the post you tag

When you tag @greatpost_buddy under someone’s post, Threads shows the bot your tag but hides which post it is under unless that post’s author tests our app. You, as the author of your tag, can always read it. So signing in to GreatPosts includes this permission: when you agree to the terms and this notice at sign-in, we ask Threads for read-only access (“read your profile and posts” and “read replies”) and keep that token for you. It is encrypted at rest with a key stored outside the database, bound to your account and Threads connection, and can only read your posts and the replies to them; it cannot post, reply, delete or change anything. We use it only to read your own tag and the one post it sits under, once per tag. It is valid for up to 60 days, is renewed only when you actually tag us, and is deleted at the latest 180 days after you agreed. If you do not want this, do not sign in. You can withdraw it at any time: use “Turn off” in your account, remove the connection, delete your account, or disconnect GreatPosts in Threads, and it is deleted straight away. Without it you cannot give Community Diamonds by tagging, and a tag you already made cannot be matched until you turn it on again.

Your posts, your choice

Accepting a Community Diamond on Threads does not put the post on this website. Connecting your account does not publish it either. You choose each post in your website features. Hiding a feature keeps its Threads Community Diamond. Withdrawing the Community Diamond on Threads hides the website feature as well. Accepted posts appear only through Threads’ own embed, and only after the author’s explicit choice.

Withdrawing and stopping

Reply “withdraw” to the bot’s reply or its announcement post and, once your reply is verified, the card is hidden and the bot’s posts are queued for deletion. Replies are checked periodically, so removal on Threads can take a little while. Reply “stop” to anything the bot posts to stop all future invitations, even if you were never invited; the bot answers once to confirm. Reply “start” to come back. No account is needed for any of this.

Images, video and where they are processed

An invitation is posted as an image so the author can see the Community Diamond. Threads has to download that image from a public address, so it is stored in a Cloudflare R2 bucket at an unguessable address and deleted after 14 days. Award images and videos are made by a computer we operate ourselves and stored on our own hosting, outside the public website folder; they are served only while the award is active, and a withdrawal immediately revokes the address and queues the files and bot posts for removal. If our own computer is unavailable, Cloudflare Browser Run may make the image instead; it receives a short-lived private address to the card, nothing else. Copies already downloaded or cached elsewhere cannot be recalled.

Who else receives information

We share personal information with anyone else only when the law requires it, or to protect the service and its users from abuse.

Cookies and browser storage

We set only cookies the service needs, all marked secure and HTTP-only: __Host-gp_identity keeps you signed in (up to 24 hours), __Host-gp_flow protects the sign-in step (about 30 minutes) and __Host-gp_continue remembers where to take you after signing in. Your browser’s local storage keeps your light or dark choice and the looks you save on the Give page; these are not sent to us and you can clear them in your browser settings.

How long we keep it

Your rights and choices

You can ask to access, correct or delete your personal information, get a copy in a portable format, object to or restrict certain uses, or withdraw consent where we rely on it. If you have an account you can download your data, hide your website features and delete the account yourself on your account page; how to delete your data covers every route, including for people without an account. Otherwise email dylan@dentedprinter.com; we may need to confirm it is you and we aim to answer within 30 days.

If you live in the EU or UK: we rely on your consent for Threads sign-in and the tag lookup, on providing the account you asked for (a contract with you) for accounts and giving, and on our legitimate interests for running the service securely and respecting opt-outs. If you are not satisfied with our answer you can complain to the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec if you live in Quebec, or your local data protection authority.

Security, children, storage and changes

The site is only served over HTTPS, access tokens stay on our server, and the stored Threads access is encrypted. No system is perfectly secure; if a breach creates a real risk of significant harm we will tell the people affected and the authorities as the law requires. GreatPosts accounts are for people 16 or older and the service is not meant for children; if you think a child has sent us personal information, email us and we will delete it. Our hosting is in the United States, and the services above may process information there and in other countries, whose privacy laws may differ from yours. When this notice changes we update the date at the top and say so on the site for important changes.

GreatPosts Diamonds browser extension

The optional GreatPosts Diamonds extension for Chrome and Firefox shows the Community Diamond a post was given, next to that post on Threads. It collects nothing about you: no account, no analytics, no advertising, no tracking, and no personal data is sent to us or anyone else.

About every two minutes it downloads one public list of awarded posts from greatpost-buddy.net, without cookies or any identifier, and keeps it in your browser’s local storage with your extension settings (the switches in its popup). Matching posts on a Threads page happens entirely in your browser: which posts you view or scroll past is never sent to us. It reads Threads page content only to find post links, and only on threads.com and threads.net.

When it shows a Community Diamond it may load that award’s picture from greatpost-buddy.net, or open the live 3D Community Diamond from www.dentedprinter.com using the award’s public ID. As with any website, our server sees the IP address and standard browser details of that request in routine logs. Removing the extension deletes its local data.

Related services

You can optionally link one DentedPrinter account to your GreatPosts account to copy your saved designs. The link stores only the pairing and when it was made; it does not merge accounts, share drafts or history, or give any special access, and either side can remove it (deleting either account removes it). To prove the DentedPrinter account is yours you sign in to DentedPrinter once; this site uses that only to confirm ownership and keeps no DentedPrinter session. DentedPrinter’s own tools have their own notice on dentedprinter.com.

Contact

Dented Printer, Ontario, Canada · dylan@dentedprinter.com

Not affiliated with, authorized, or endorsed by Meta Platforms, Inc.