Privacy

Your email and a hash of your password. Your handle, name, bio and the face (the emoji of your number one). The list: every thing on it, its position, emoji and note, and every position it has ever held, with dates. Who you follow, who you are friends with, what you warmed to, what reached your inbox. Nothing else: no location, no contacts, no tracking pixels, no third-party analytics.

Anyone who opens your page sees your public rows: position, title, emoji, note. Your email never shows anywhere. A private row shows to nobody and matches nobody; a private list hides the whole list. Global counts things, never people: a number on Global is how many lists carry a thing, not who.

A match forms when two public rows name the same thing. Both people learn it; nobody else does. Make the row private and the match goes. Block a person and nothing forms between you, either way.

Two kinds, both off in Settings with one switch: a match on a thing of yours (at most once a day) and a friend request. The week by mail, once a week, if you have a list. Sent through Resend; your address goes nowhere else.

One: the session that keeps you signed in, signed, HttpOnly, and gone when you log out. Sound, the pointer and the theme are remembered in your own browser, never sent.

Settings has your whole list as JSON and Markdown, every position and every note, any time. Delete my account, on the same page, removes everything above at once and for good: the list, its memory, the matches, the inbox, the people. Counts that included you are put right at once.

Report on a thing or a person reaches one human, by mail. Nothing is removed by a machine. The report keeps who sent it and when, and nothing more about you.

A Postgres database on Neon and the app on Vercel. No ads, no investors, nothing sold. If any of this changes, this page changes first.