Privacy Policy
Last updated: placeholder - update before launch.
1. Overview
SHHHHHHH is designed to keep participants' identities private from each other. We may process limited technical information for security, abuse prevention, and service operation, as described below.
2. Information we collect
- Account data you provide: email, password (hashed), optional display name.
- Conversation data: messages, timestamps, and anonymous participant records.
- Limited technical data processed temporarily for security and abuse prevention, such as hashed IP addresses and user-agent strings.
- Cookies and local/session storage used to maintain your session and anonymous chat access.
3. What we never show other participants
- Your email address
- Your phone number
- Your IP address or approximate location
- Your device or browser fingerprint
- Internal database identifiers or session/access tokens
4. Cookies and session storage
We use HttpOnly cookies to keep you signed in and to maintain anonymous participant sessions per conversation. As a backup, a copy of your per-conversation access token may be kept in your browser's session storage. We do not use these mechanisms for cross-site advertising tracking. Full details are in our Cookie Policy.
5. Security logs
We maintain structured logs for operating and securing the Service (for example: request metadata, error rates, rate-limit events). We do not log passwords, raw authentication tokens, or anonymous participant secret tokens. Message content is not included in routine logs.
6. Data retention
Conversations and messages are retained according to our configured retention policy. We do not delete active conversations merely because a participant is anonymous or because a link was lost.
7. Reports and moderation data
When you submit a report, we store the report reason, optional details, and references to the relevant conversation/message so our team can review it. We do not reveal your identity as a reporter to the reported participant.
8. Deletion
You can delete your account at any time from Settings. Deleting your account does not automatically delete anonymous conversations you never claimed, but removes your personal account data associated with claimed conversations according to our retention rules.
9. Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal data. You can export a basic copy of your account data from Settings, or contact us using the details below.
10. No data sale
We do not sell your personal data. We do not use contact syncing or scrape your contacts.
11. Contact
Privacy questions can be sent to [email protected] (placeholder).