Last updated: October 9, 2026
Applies to Qnest (https://www.qnest.top). Questions about anything below? Reach us at the address at the end of this page.
Qnest ("we", "us") operates the website at https://www.qnest.top. This policy explains what personal data we collect when you use the site, why we collect it, and what choices you have. It is written to reflect how this website actually works, not a generic template.
Account data: your display name, email address, and a securely hashed password (bcrypt). We never store or transmit your password in plain text.
Content you publish: articles, questions, answers and votes you submit, together with your account identifier and timestamps. Published content is public and may be attributed to your display name.
Membership and orders: if you subscribe to a plan we store your plan, amount, order status and timestamps. Payments are confirmed manually by our team — we do not collect card or banking details on this site.
Sessions and devices: when you sign in we issue a short-lived access token (kept in your browser) and, if you stay signed in, a rotating refresh token bound to a device identifier. The refresh token expires 90 days after it is issued and we record the last time each device was seen. This lets you stay signed in without re-entering your password and lets us revoke a single device.
Uploads: images you upload are stored on our server and re-encoded to WebP. Technical metadata retained is the file location used to display the image.
Server logs: our web server records requests including IP address, user agent and timestamp. These are used for security, abuse prevention and rate limiting, and are kept only as long as needed for those purposes.
To create and authenticate your account, and to keep you signed in across visits.
To display the content you publish to other visitors and to attribute it to you.
To operate memberships, review orders and provide any access that comes with them.
To keep the service secure: detecting spam, brute-force attempts, scraping and other abuse, including temporary rate limiting by IP address.
To keep the site discoverable: content is exposed through sitemaps and machine-readable files (including an llms.txt index) so that search engines and AI assistants can cite it. Public content may therefore appear in third-party search or AI-generated answers.
We do not sell or rent your personal data.
We do not set advertising cookies, tracking pixels or cross-site trackers from our own code, and we do not build advertising profiles of our visitors.
We do not send marketing email. Notices you receive relate to your account, your content or administrative matters.
We do not collect payment card numbers, government identifiers or precise location.
Our content and community pages do not embed third-party analytics or social widgets by default. If the site operator adds custom code (for example a statistics or advertisement snippet) through the site settings, that third party may collect data under its own policy; we will keep this page updated whenever that changes.
Articles and answers may link to other websites. We are not responsible for their privacy practices, and outbound linking data (such as Friend Link verification requests) is limited to what the check requires.
We keep your data for as long as your account exists or as long as needed to provide the service. Server logs are rotated out on a short cycle. Refresh tokens expire 90 days after issue. Content you published may remain after you delete your account where removing it would break the integrity of an existing discussion; in that case it is retained without your profile attached.
We use industry-standard safeguards appropriate to the size of this service: passwords hashed with bcrypt, database access through prepared statements, strict allow-list sanitisation of user-submitted HTML, script execution disabled in upload directories, hashed tokens for sessions, and rate limiting at the edge. No online service can be perfectly secure, so please use a unique password and tell us if you suspect a problem.
Depending on where you live you may have the right to access a copy of your data, correct inaccurate data, delete your account and personal data, restrict or object to certain processing, and receive your content in a portable form. You may also withdraw any consent you gave us.
To exercise these rights, contact us using the details at the bottom of this page. We may ask you to verify your identity before acting, and we will respond within the time your local law requires.
If you are not satisfied with our response, you may lodge a complaint with your local data protection authority.
This site is intended for a general audience and is not directed at children under the age of digital consent in your jurisdiction (13 in many countries, 16 in parts of the EU). We do not knowingly collect personal data from younger children; if you believe a child has registered, contact us and we will remove the account.
We may update this policy as the site evolves. The "Last updated" date at the top tells you when it was last revised; material changes will also be reflected there.
For privacy requests, copyright notices or any question about these terms, write to [email protected]. We aim to reply promptly.