Privacy
What we collect, and why
Last updated: 16.09.2026 · v2026-09-16
This site works under a pseudonym: we never ask for your real name, surname or national ID number. Below is what we store, what it is for and how long it stays. If anything is unclear, write to us from the support page.
What we store
The retention windows are automatic — scheduled tasks enforce them, not manual cleanup.
Nickname, gender, date of birth
- What it is for:
- Creating the account and keeping the 18+ rule
- How long:
- While the account exists
Password — only as an irreversible hash
- What it is for:
- Signing in
- How long:
- While the account exists
Email address — optional
- What it is for:
- Password recovery and confirming the address
- How long:
- Until you remove it or close the account
Profile: bio, city, interests, “what are you looking for?”, photos
- What it is for:
- Filling in your profile for the audience you chose
- How long:
- Until you delete it
Posts, comments, reactions and their media
- What it is for:
- The main purpose of the site
- How long:
- Until you delete them
Stories
- What it is for:
- Short-lived sharing
- How long:
- 24 hours, then removed automatically
Private messages — encrypted in the database
- What it is for:
- Delivering your messages
- How long:
- Until you delete them; removed when the account is deleted
The shared mini chat room
- What it is for:
- Public conversation
- How long:
- The last 500 messages or 24 hours, whichever comes first
IP address and browser/device description at sign-in
- What it is for:
- Account security and spotting ban evasion
- How long:
- 30 days
Active sessions
- What it is for:
- Keeping you signed in and letting you close other sessions
- How long:
- Until they expire or you sign out
Profile visits — who opened your profile
- What it is for:
- The “visitors” page
- How long:
- 30 days; you can clear them at any time
Post views and daily activity
- What it is for:
- Feed ranking and the online status
- How long:
- A view stays with the post; the online status is a 30-minute window
Reports and moderation records
- What it is for:
- Enforcing the rules
- How long:
- After the case is closed; story evidence for at most 3 days
Support tickets
- What it is for:
- Answering your question
- How long:
- For handling the ticket and keeping its history
Mail delivery log — the recipient domain only, never the address
- What it is for:
- Seeing delivery problems
- How long:
- 30 days
What we do not collect
This is not only a promise — these fields do not exist on the site at all.
- Real name, surname and national ID number — never asked for, never held
- Phone number
- Identity documents or a video selfie — optional verification does not exist yet; this page will be updated before it launches
- Payment details — there is no paid feature yet
- Ad networks, third-party analytics and cross-site trackers
- Precise location — a city appears only if you typed one yourself
Who can see your data
You choose the visibility: your profile, each post and each story carry their own audience — everyone, friends, or only me.
- A block works both ways: the blocked side sees no profile, posts, comments or stories
- Staff cannot read your private messages in the ordinary course — only within a specific report, and only the one message that was reported
- IP address and device are shown on the administration screen to the owner and admins only, never to moderators
- Every administrative action is written to an audit log: who changed what, and when
How we protect it
Technical protection means what we actually have — and nothing more.
- The text of private messages is encrypted in the database (AES); a stolen copy of the database cannot be read without the key
- This is not end-to-end encryption: the key lives on the server, so moderation can technically read the one reported message within a specific report
- Passwords are stored only as hashes — not even we can recover them
- The whole site runs over HTTPS; media files do not open by direct address and access is re-checked on every request
Who it is shared with
We do not sell data and we do not pass it on for advertising. These are the providers the service needs:
- Hetzner — the server that runs the site and the database; located in Germany
- Cloudflare — DNS for the domain
- Resend — sending email (recovery codes, address confirmation); European region
- A binding legal request — then only, and only to the extent the law requires
Your rights
Most of it is in your own settings, with nothing to wait for.
- Access and correction: profile and account data can be changed in Settings
- Deletion: account deletion starts in Settings — you have 14 days to undo it, after which the profile, media, sessions, posts and comments are removed
- A copy of your data: write to us from the support page and we will prepare it
- Opting out: an email address is not required — without one, only password recovery stops working
- Complaint: if our answer does not satisfy you, you may contact the data protection authority in your country
Age
The site is for people over 18 only. You declare your age yourself at registration. If an account turns out to be used by a minor, the account is blocked and its data is deleted.
Changes and contact
The project is still being built and this page will change with it. The date above tells you when it last did. For questions or a data request, use the support page.