What we do not collect
Transparency is not optional. It is a commitment.
IP addresses
We never store your IP address in plain text. Rate limiting uses an HMAC hash with a daily rotating salt.
Tracking cookies
No third-party cookies. No Google Analytics. No Facebook Pixel. No GTM. Ever.
Invasive fingerprinting
No canvas fingerprint, no WebGL fingerprint. Only basic, non-invasive signals are used for anti-spam.
Data sales
No data is sold, rented or shared with third parties. No exceptions.
Visitor profiling
Visitors who click on your links are not individually tracked. Statistics are anonymous and aggregated.
What we collect
Email and hashed password (Argon2ID) for accounts. Anonymized statistics (country, device, browser) for your own analytics. Session, theme and language cookies. That is all.