Privacy Policy

What we store

• Email address — only as a salted cryptographic hash (for login lookup) plus one encrypted copy (for magic links and digests). Admins cannot read your email in plaintext from the database.
• Handle, bio, avatar, stances, posts — whatever you publish is public.
• IP addresses — never in plaintext. Only salted hashes, kept 14 days for rate limiting and abuse, then expire.
• Sessions — a hashed session token; 30-day expiry.
• Media you upload — EXIF/GPS metadata is stripped server-side before storage. Photos may be checked against known child-safety hash lists (see below).

What we do NOT do

• No ads. No tracking pixels. No selling data. No “partners.”
• No phone number, no real name, no ID checks.
• No cross-site tracking of any kind.

Child safety (legal requirement)

Uploaded images may be hash-matched against lists of known child sexual abuse material (e.g. via Cloudflare Scanner or PhotoDNA). Matches are retained and reported to NCMEC as required by 18 U.S.C. § 2258A. This is the one case where media may be preserved as evidence.

Your data

Email us to request deletion of your account data. Published posts are public; deleting an account removes its profile and handles.

Contact

Proven Blue LLC · [email protected] (replace with your address)