What we store
- Your account: handle, display name, email address, and a one-way hash of your password.
- Your content: murmurs, replies, sparks, echoes, follows and any images you upload.
- Security records: sign-in times, the IP address used, and a short description of your browser. These appear on your own security page and let us spot attacks.
What we never store
- Your password in a readable form.
- Location data from your photos - it is stripped when the image is re-encoded.
- Anything from third-party trackers, because there are none.
Cookies
Two, at most. One identifies your session. One remembers you on this device if you ask it to. Both are HttpOnly, both are marked Secure over HTTPS, and neither is used for advertising.
Deleting your account
Settings → Security → Close your account. Your murmurs are removed, your profile is anonymised, and every session ends immediately.