Privacy Policy

What we collect

• Your post — the message text and optional handle you submit. This is public by design, including its redaction/restore history.
• Notification email (optional) — only if you choose to leave one when posting. Used solely to tell you when your post is redacted. Never displayed, sold, or shared.
• IP address — used to rate-limit posting, actions, and reports (anti-spam). Report IPs are stored with the report for abuse tracing; other IPs live in short-lived rate-limit counters. IPs are never displayed publicly.
• Payment records — card details go to Stripe and never touch our servers. We retain the amount, timestamp, and what the payment did.
• Bot & moderation checks — post creation runs through Cloudflare Turnstile (receives your token/IP), and post text is screened by an automated moderation service before publishing.

What we don't do

• No accounts, no passwords, no cookies for tracking.
• No analytics or advertising trackers.
• We never sell or share personal data.

Retention

• Posts and their action history: kept until removed by us.
• Notification emails: kept until the post is removed or you ask us to delete them.
• Report data (including reporter IP): 90 days, then deleted.
• Payment ledger rows: kept as long as needed for accounting and dispute defense.

Third parties

Stripe (payments), Cloudflare Turnstile (bot checks), Supabase (database hosting), Vercel (hosting), Resend (notification email, if you opted in), and an automated content-moderation API. Each processes only what it needs to deliver its function.

Your choices

Want a post removed or a notification email deleted? Use the Report button on the post or contact the operator through the channel on the Terms page — deletion requests are honored promptly.