Privacy policy

Who we are

PostRally is a platform for running LinkedIn posting contests at community events, operated by farzanfa.com. This policy describes what data the platform handles when you sign in with LinkedIn and take part in a contest.

What we collect

• LinkedIn profile basics — when you sign in with LinkedIn (OpenID Connect) we receive your name, profile photo, your app-specific LinkedIn member ID, and your email address if LinkedIn provides it.
• A posting permission token — LinkedIn issues an access token (valid up to 60 days) that lets the platform publish a post only when you explicitly tap “Post”. It is stored encrypted-at-rest in our database and is never shared or shown to anyone.
• Contest activity — for each task you complete we store the ID and public URL of the LinkedIn post you created, and the time. That is what powers the leaderboard.
• Cookies — an encrypted session cookie keeps you signed in (7 days); short-lived cookies (10 minutes) secure the sign-in flow; organizers have a separate admin session cookie. We use no analytics, advertising, or tracking cookies.

What we never do

• We never post to LinkedIn without you tapping the post button.
• We never read your LinkedIn feed, messages, connections, or the engagement on your posts — the platform has no permission to.
• We never sell or rent your data, and we show no ads.

Photos and drafts

Photos you attach are compressed on your device and relayed directly to LinkedIn — they are not stored on our servers. Draft text is kept only in your browser's session storage on your own device.

Tagging opt-in

If you sign in through the /tagme page, you opt in to letting contest organizers mention (@tag) your LinkedIn profile in posts published through the platform. Your name and member ID become visible to organizers for that purpose. You can ask us to remove this at any time.

Who processes the data

The platform runs on Vercel (hosting) and Turso (database), and talks to the LinkedIn API to publish your posts. Your use of LinkedIn itself is governed by LinkedIn's privacy policy.

Retention and deletion

Contest records are kept until the organizer deletes the contest. Access tokens expire automatically within 60 days. To have your account data removed at any time, contact us via farzanfa.com — we will delete your profile record, token, and contest entries. Posts on your own LinkedIn feed are yours and stay under your control on LinkedIn.

Changes

If this policy changes, the date above is updated. Material changes will be noted on this page.