Privacy Policy

What We Collect

• Account holders: username, email address, and a hashed password. No plaintext passwords are stored.
• Anonymous senders: a one-way hash of the sender's IP address (rotated daily). We do not store raw IP addresses for anonymous messages.
• One-time secrets: encrypted content stored server-side. Decryption keys never leave the sender's browser. Content is permanently deleted after one view or expiry.

How We Use Your Data

Your data is used solely to operate the service. We do not sell, rent, or share personal information with third parties for marketing purposes.

Third-Party Services

• Cloudflare Turnstile: bot protection on forms.
• Sentry: error monitoring to keep the service reliable.
• Neon: database hosting.

Cookies

We use a session cookie for authentication. No tracking or advertising cookies are used.

Data Retention

Account data is retained while your account is active. One-time secrets are destroyed after viewing or after 7 days. You can delete your inbox messages at any time.

Contact

For privacy inquiries, contact us at hello@secretpost.app.