Privacy

If you have an account

We store your email address, a hash of your password if you set one, your chosen handle, your language, and the moods you have set. Passwords are stored with argon2id and session cookies as SHA-256 digests, so a copy of the database is not a set of working logins.

If you are just looking at somebody’s page

No cookie is set, and no IP address is written down. To avoid counting the same person twice in an afternoon, a visit is recorded as a one-way hash of your address, your browser’s user-agent, the profile you looked at, and a random key generated fresh each day. That key is deleted after three days — once it is gone, the hash cannot be recomputed from anything, by anyone including us, so there is no way to tell that yesterday’s visitor is today’s.

Alongside that we keep the host a visitor arrived from — instagram.com, not the page or its search query — and whether the device was a phone, a tablet or a computer. Raw visit records are deleted after 30 days; only daily totals are kept.

Preview fetches

When a chat app fetches a link to build its preview card, that is recorded separately and shown to the page’s owner as “WhatsApp fetched your card”. It is not counted as a visit, and nothing about it identifies a person.

Other services

GIF search is proxied through our own server, so the GIF provider never sees your address. Emoji artwork for preview cards is fetched by our server from a public CDN, not by your browser. Mail is sent through a relay we run. There is no analytics service, no advertising, and no tracking pixel.

Your data

Write to the address below and we will export or delete your account. Deleting it removes your profile, your moods and your sessions. Aggregated daily totals that cannot be traced to a person may remain.