Privacy policy
The plain-language version is on how anonymity works. This page is the formal one. They say the same thing.
No accounts
You can read and post here without creating an account. We do not ask for your name and there is no profile. The display name on a post is generated for that discussion and is not linked to anything else you write.
What we store when you post
- Your post — the text and the display name you chose. Public.
- A one-way security hash. We do not store your IP address. It is combined with browser details and a rotating secret, hashed, and kept for 30 days for rate limiting. It cannot be reversed into an IP address, and once the secret rotates, old hashes can no longer be linked to new ones.
- A hash of your edit token. Not the token. That means you can delete your own post and we cannot.
- An email address, only if you give one. Optional, encrypted, stored in a separate table from post content, deleted after 180 days, never displayed.
- Screening output. When a post is held for review we keep what the automated screen flagged, so a moderator can see why. Not public.
Images
Location data and other metadata are stripped and the file is re-encoded on our server before publication. A photo taken on a phone usually carries the exact coordinates where it was taken; we remove that before anyone else can see the image.
What we will not claim
We will not tell you that posting here is untraceable. That would not be true of any website. Running a service that resists spam and abuse requires keeping some security information briefly, and we comply with valid legal process.
If being identified would seriously harm you, think carefully about what details you include. Specific dates, roles and incidents can identify a person even when no name appears.
Legal process
If we receive a valid legal demand we respond as the law requires. What we can produce is limited by what we hold — which, by design, is very little and does not include IP addresses.
Your requests
To have a post removed, use the removal request form. To ask what we hold about you or have it deleted, use the same form and say so. You do not need an account, and you do not need to be the poster.
Analytics
We use privacy-conscious analytics to understand which pages get read. We do not use advertising trackers, and we do not sell data.