Privacy

Cookies and browser storage

We use only essential cookies and browser storage to keep sign-in secure, prevent abuse and remember settings such as your age confirmation and cookie acknowledgement. Staging access uses a secure, HttpOnly session cookie that expires after eight hours.

We do not use advertising or behavioral analytics cookies. If that changes, optional storage will remain off until you explicitly choose it.

Data minimization

We minimize identity and abuse data and keep link-only capability secrets out of URLs sent to servers.

What we record

We record Firebase account identifiers, App Check verification, policy versions and timestamps, votes, credits, reports, uploads, device and network abuse signals, and operational audit events. Image upload consent records identify the user, media, question binding, policy version, and time.

Images and safety reports

Images are processed into metadata-free WebP files and delivered only to signed-in members with private, non-cacheable responses. Reports require an eligible signed-in account and access to the content; containment and deletion remove delivery bytes while preserving restricted evidence only when safety or legal duties require it.

Retention and deletion

Unattached uploads expire after 24 hours. Account deletion removes ordinary private and public delivery bytes and identifiers through a resumable deletion job. Restricted legal-hold evidence may be retained for the required hold period and is not available through participant or ordinary operator media views.

Rights and safety requests

Use TAKE IT DOWN for non-consensual intimate imagery. Members can report copyright, privacy and safety concerns from the affected decision. Verified support contact information is a Production launch configuration requirement.