Privacy

What we do not collect

The exclusions come first, because they are commitments rather than settings:

• No IP address is stored or shown. There is no such column in the database, and none in the logs.
• To count where people are, we read your IP once when you submit an idea, turn it into a country name using a local offline database, and immediately discard it. The lookup makes no network request; the IP is never written down or passed on.
• What is kept is a country and a city name, plus coordinates rounded to roughly 11km — enough to group people from one city into a single point on a map, not enough to locate anyone.
• City means city level only. The data source gives street-level names in some regions; those are downgraded to the province or municipality before anything is stored. No neighbourhoods, no addresses, no precise coordinates.
• Geographic data comes from DB-IP's offline open database (db-ip.com, CC BY 4.0). The lookup runs on our own server and makes no third-party request.
• No analytics, no ad trackers, no third-party scripts on the page.
• No friending and no direct messages.
• Signed-in users are shown by nickname: comments are signed, and a report names who posted an idea first, with their avatar. Anonymous submissions are not — they show as anonymous. Emails are never shown.

What you write

• Submitted ideas are public. They appear in Explore and count toward other people's echo totals.
• Notes are private and are never analysed or compared — they have not entered the matching pool, so they cannot surface in anyone else's report.
• Comments are public and signed with your nickname, or a stable assigned handle if you have not set one. Your email is never shown.

Accounts

• Every core feature works without an account; we then keep only an anonymous identifier in your browser so your own records stay together.
• Signing up collects an email and a password. Passwords are stored scrypt-hashed with a salt — we do not hold your password.
• Comments, notes and history require an account.

History

• Signed-in users only. Anonymous browsing is not recorded.
• Kept for three days. The same window is applied on read, so nothing older is shown even if cleanup lags.
• You can clear it at any time.

Who we share with

• A model provider: the text you submit is sent to an OpenAI-compatible model service for analysis.
• Public-source search: when enabled, keywords from your idea are used to search public sites. This is currently off.
• Nothing else is shared, and nothing is sold.

Deletion

• Contact us to delete your account. Saves and me-too marks go with it.
• Ideas and comments you wrote are kept, detached from any account. Other people's reports already counted them, and making someone else's number drop is its own kind of dishonesty.