Privacy

Your email and a hash of your password. Your handle, name, bio and the face (the emoji of your number one). The list: every thing on it, its position, emoji and note, and every position it has ever held, with dates. Who you follow, who you’re friends with, what you warmed to, what reached your inbox. If you set them, your handles on Telegram, Instagram or X: handles only, never a link you typed. Nothing else: no location, no address book, no tracking pixels, no third-party analytics.

Anyone who opens your page sees the public things on your list: position, title, emoji, note. Your email never shows anywhere. Your handles, if you set any, show to your friends, and to everyone only when you switch that on. A private thing shows to nobody and matches nobody; a private list hides the whole list. Discover counts things, never people: a number on Discover is how many lists carry a thing, not who.

A match forms when two public lists carry the same thing. Both people learn it; nobody else does. Make the thing private and the match goes. Block a person and nothing forms between you, either way.

Two kinds, both off in Settings with one switch: a match on a thing of yours (at most once a day) and a friend request. The week by mail, once a week, if you have a list. Sent through Resend; your address goes nowhere else.

One cookie: the session that keeps you logged in, signed, HttpOnly, and gone when you log out (a second, 10-minute one carries a login through Google; a third remembers the language of the interface; in the Google Play app, a fourth remembers that it is the app; a fifth, for 30 days, remembers the site or the link tag you first came from, one word such as “x”, so we know which door brought people in). Sound, the pointer and the theme are remembered in your own browser, never sent. Page views are counted by Vercel Analytics without cookies or a person’s identity; errors go to Sentry without your name, address or what you typed. We keep our own count of what happens (a sign-up, a thing named, a share) with the country it came from, never the address or the page, and let it go after half a year.

Logging in with Google gives us your Google id, your name and your email, which Google has checked; logging in with Telegram gives us your Telegram id, your names and your handle. Nothing is posted anywhere on your behalf. Connect or disconnect them in Settings.

Settings has your whole list as JSON and Markdown, every position and every note, any time. Delete my account, on the same page, removes everything above at once and for good: the list, its memory, the matches, the inbox, the people. Counts that included you are put right at once.

Can’t log in any more? Open Feedback at the foot of any page, choose Something else and leave the address the account uses: we delete it within 7 days and write back when it is done.

For the daily berry we keep the days you picked one, how many are in your basket, your streak, and each berry given: who gave it, to which row, and when. The person you give one to sees your name on it in their inbox. If you turn on the Telegram reminder, the bot writes once a day while it is on. All of it is in your export and goes with your account.

Report on a thing or a person reaches one human, by mail. When several different people report the same thing, it is hidden until that human looks: hidden, not deleted. A profile photo our model flags is taken down, and your face is its emoji again. The report keeps who sent it and when, and nothing more about you.

A Postgres database on Neon and the app on Vercel, both in the European Union. Mail goes through Resend, errors through Sentry (EU), support through Telegram (Stars) or Tribute, which take your card and never give it to us. Nothing about you is sold. If any of this changes, this page changes first. You need to be 16 or older to have a list.

In Stars we keep your Telegram id, the amount, Telegram’s number for the payment, and, for a keeper, the day the paid month ends: enough to say thank you and to show the ring while it’s yours. Tribute tells us nothing about who paid. A transfer in TON or USDT reaches a public wallet: we can’t tell who sent it, but the transfer and the sending wallet’s address are visible to anyone on the TON blockchain, as every transfer there is.