Privacy

• Your email, name, username, password (stored only as a secure hash) and, if you add one, your photo. Photos are re-encoded on our server, which removes location and camera data.
• The messages people send you, and your settings (question, filter level, filter words, blocked senders).
• Sign-in sessions: the device type and network address of each signed-in browser, so you can recognise them.

You don't sign in and we don't ask who you are. With your message we store only:

• The text, the question it answers, and when it was sent.
• Two scrambled codes made from a random cookie on your device and your network. They're different for every link you write to and can't be turned back into your device or address. They exist so the person you wrote to can block you.

We don't keep your IP address with a message or in the request logs for sending. Rate limits keep short-lived counters in memory only.

• A sign-in cookie for link owners.
• A device cookie for senders, used only for anti-spam limits and blocking (see above).
• No advertising or tracking cookies, and no third-party analytics.

Your messages are visible to you only. If you report a message, a copy is kept for our review even if you later delete it. Story images are made on your own device and never uploaded. We don't sell data or show ads.

Delete your account from Settings at any time. Your account, profile, photo, messages and blocks are deleted immediately. Reports you made are kept for review without your account attached.

Questions or requests: hi@example.com.