Privacy Policy
Last updated: 9/12/2026
What we collect
Account data: username, hashed password, profile fields you choose to fill in (bio, location, website, avatar photo, grow details). Content you post: threads, replies, diaries, photos, chat messages. Technical data: we store only a salted hash of your IP address for rate limiting and abuse prevention — never your raw IP.
What we don't collect
No email address is required. No tracking pixels or advertising trackers are embedded, and we do not sell or share your data with advertisers. We use Vercel Analytics, a privacy-focused service that records anonymized page views and performance metrics only — it uses no cookies and collects no personal data.
Cookies & sessions
We use a session cookie to keep you signed in and nothing else. There are no marketing or analytics cookies.
Your controls
From your profile you can: export a full copy of your data, edit or delete your content, and permanently delete your account — which removes your profile, posts, messages, and associated data.
Data security
Passwords are hashed with bcrypt. Traffic is encrypted over HTTPS. Access to the database is restricted and security events (logins, rate-limit events) are logged without raw IPs.
Data retention
Data is retained while your account exists. Security logs are kept for abuse-prevention purposes and pruned over time.