Your privacy, in plain words

What other people can see

Only the words you post, the category you chose and roughly when you posted. Never your email, never your account, and never which posts are yours. Votes, reactions and reports are never shown with who made them.

Secrets are never shown in a public feed. Each one is only shown to individual people through the secret exchange, one at a time.

What we collect

• Your account: your email address and password. Your password is stored scrambled (hashed), so nobody can read it. We don't send you emails.
• Your time zone, so the daily secret exchange resets at your midnight.
• What you post and your votes, reactions, answers, replies and reports, linked to your account so you can see your own posts and so limits (like 3 secrets a day) work.
• A scrambled version of your IP address, used only to prevent spam and abuse. Our own database never stores your actual IP address (our sign-in provider may log it briefly for security).
• Anonymous visit statistics: a random ID stored in your browser (not a cookie), the pages you view and how long the tab is open. We use this only to count visitors and see how the site is used, never for advertising.

Cookies

We use cookies only to keep you signed in. There are no advertising or third-party tracking cookies.

How posts are checked

Everything you post is checked automatically for personal information, harmful content and signs that someone may be at risk. Some posts are held for a person to review. Moderators see the post and an anonymous account code, not your email.

Services we use

• Supabase stores the database and handles sign-in.
• Netlify hosts the website.
• Cloudflare Turnstile checks that sign-ups come from people, not bots.
• We may use an automated moderation service (such as OpenAI's) to check the text of posts.

They process data only to provide these services to us. We never sell your data or share it for advertising.

Deleting your data

You can delete your account at any time from My posts. This permanently deletes your account and everything you posted. Visit statistics that are no longer linked to an account may be kept as anonymous totals.

When we might share information

Only if we're legally required to, or if we believe someone's life is in danger. Because we don't collect real names, there is very little we could share.

Age

Secretly is only for people aged 18 or older, or the minimum age where you live if that's higher.

Changes

If we change this policy, we'll update the date at the top of this page.