Privacy Policy

• Account details you provide: first name, username, optional bio, email address, and an optional date of birth.
• Authentication data: a hash of your password (never the password itself), registered passkeys, and your linked Telegram account id and username.
• Security and session data: IP address, user agent, approximate country, and sign-in and account-security events, used to protect your account.

• To create and operate your account and to sign you in.
• To provide two-factor approval and other security features, and to detect and prevent abuse.
• To notify you about security events affecting your account, where you have those notifications enabled.

We use a small number of processors to run the Service:

• Telegram — to deliver two-factor approval prompts and to support Telegram-based sign-in.
• An email provider — to send verification and security codes to your email address.
• Cloudflare Turnstile — to protect sign-up and sign-in against automated abuse.

When you authorize a third-party application through OAuth, we share only the information covered by the scopes you approve (for example your profile, email, or date of birth). We do not sell your personal data.

We keep your account data for as long as your account exists. Security event records are retained for a limited period to investigate abuse. When you request deletion, your account enters a short grace period and is then permanently removed; some records may be retained where required for security or by law.

• Export your data or delete your account at any time from Settings → Danger zone.
• Deactivate your account to pause it; signing back in reactivates it.
• Control profile visibility and notification preferences in your settings.

We may update this Privacy Policy. Material changes are reflected in the version and effective date shown here.

For privacy questions, reach us through support. See also the Terms of Service and Rules.