Privacy policy
Draft. Not legal advice. A lawyer must review this before launch.
If you send a message
- You don't need an account. We don't ask for your name, email, phone number, or contacts.
- We set a random ID cookie on your device to stop spam and to make blocking work. We store only a coded version of it. It is kept for 30 days with each message, then deleted. If a wall owner blocks you, it stays on their block list until they unblock you or delete their account.
- The wall owner never sees this ID or any data about you.
- We don't store your IP address. To stop bots, we count sends using a coded version of it that changes every day. These counters are deleted automatically, usually within about a day.
If you have a wall
- We store your sign-in ID, your username, your name, and your Google profile photo if you have one. If you sign in with an email link, Google Firebase keeps your email address so it can send you links. We don't show it to anyone.
- If you add a profile photo or cover photo, it is public on your wall. Before we store it, we redraw it as a new image, which removes hidden details such as the location where it was taken. When you change or remove a photo, we delete the old one. Copies can stay in our network cache for up to a day.
- We store the messages you receive and the answers you post until you delete them or delete your account.
- You can delete your account at any time from More. This deletes your wall, messages, and answers.
What we never do
- We never sell your data.
- We never show who sent a message. We don't collect anything that says who you are.
- We don't show ads and we don't use ad trackers.
Services we use
Google Firebase hosts the app and stores data. Google reCAPTCHA checks that requests come from people, not bots.