What we collect
Only what we need to run the site and answer your questions.
The essentials
- A username you choose and an optional email.
- Your password is stored salted and hashed — never in plain text.
- A free account needs no billing details. If you choose the optional paid membership, payment is handled by our payment provider — the merchant of record named on the checkout page, where its own privacy policy is also shown. We never receive or store your full card number; we keep only the subscription status and reference needed to unlock what you paid for.
What you send and what the site sees
- Messages: the name, optional email and text you submit through our contact form, including the topic you pick.
- Technical: device type, language and theme preference, and limited, aggregated usage signals used to keep the site secure and working.
What we don't do
The lines we will not cross.
- No resale: we do not sell, rent or trade your personal data to advertisers.
- No ad profiling: we do not build ad-targeting profiles from your browsing.
- No surprise sharing: we share data only with the handful of service providers who run the site (hosting, email), and only as needed.
How we use it
Why we hold your data at all.
- To run your account and let you sign in and view your messages.
- To reply to you — every message you send reaches a person, and we keep it so we can answer in context.
- To secure the site — rate limits and abuse checks protect everyone, including you.
- To improve the experience — anonymous, aggregated signals help us fix what is slow or confusing.
- To meet the law — where a valid legal request applies, we comply minimally and transparently.
How we protect it
Defense in plain sight.
- Encrypted in transit: the site is served over HTTPS, so your data is encrypted on the wire.
- Hashed passwords: credentials are salted and hashed — we cannot read your password, and neither can an attacker who should not be here.
- Session safety: signed sessions and CSRF checks guard forms against forgery.
- Least access: only the people who support you can see your messages, and only what they need.
Cookies are small and mostly yours: we store your chosen language and theme so the site feels right when you return, and a functional cookie keeps you signed in. We do not run third-party advertising cookies. You can clear these anytime in your browser; the site still works.
Two outside services. To see roughly where visits and reports come from, our server asks a third-party geolocation provider which country and region a given IP address belongs to. That request carries the IP address and nothing else about you; the answer is cached, and the country and region are attached to our own internal visit log. If you choose the paid membership, you are handed off to our payment provider’s checkout page — that is the only other time any of your data goes to a third party. Apart from those two, nothing on this site leaves our servers.
Your rights
You stay in control of your own data.
See and fix your data
- Access & export: ask us and we will show you what we hold on you.
- Correct: tell us what is wrong and we will fix it.
Close your account
- Delete: from the My messages page you can delete your account at any time. We remove your account and messages, subject only to narrow legal-retention needs.
United States — California (CCPA)
Your rights if you are a California resident.
- If you are a California resident, you have the right to know what personal information we collect, to access it, to request deletion, and to opt out of any "sale" of personal information. We do not sell your personal information.
- To exercise these rights, contact us via the form on our Contact page. We respond within the timeframe required by law and will not discriminate against you for exercising your rights.
- This site is operated for visitors in the United States; our handling of personal data is subject to U.S. law and, where applicable, the California Consumer Privacy Act.
European Union — GDPR
Your rights if you are in the EEA.
If you are in the European Economic Area (EEA), the EU General Data Protection Regulation (GDPR) applies to the personal data we hold about you. You have the right to:
- Access, rectify or erase your personal data.
- Restrict or object to certain processing.
- Data portability — receive your data in a structured, common format.
- Withdraw consent at any time, where processing is based on consent.
Our legal bases include performing the contract to run your account, our legitimate interests in keeping the site secure, and consent where you have given it. The site is operated from the United States; where we transfer EEA personal data, we rely on appropriate safeguards. To exercise any of these rights, contact us via the Contact page. We reply within one month as required by the GDPR.
Children under 13
Who this site is for.
This is a site for adults and for teenagers 13 and older. Nothing here is built for younger children, and we do not knowingly keep personal information about them. If something reaches us from a child under 13, we delete it.
If you are a parent or guardian and you think your child has sent us personal information, write to [email protected]. We will take it down. The full notice is on our Children's Privacy and Safety page.
Contact
Questions about your data?
Reach our privacy contact through the Contact page and we will answer in plain language, fast. This policy may change; material changes will be noted here.