Privacy
What we hold, and why.
Short, because the footprint is small. There is no advertising, and nothing that follows you between sites or builds a profile of you. Two things happen beyond running the site itself: an anonymous visit counter, and our error monitor when something breaks — see below.
What we store
Your email address and an encrypted password, handled by Supabase, which is also the database. Your username, display name, bio, website, pronouns, where you are, a photo if you add one, the forms you write and whether you are marked open to feedback. Your poems, your responses, who you follow, what you have kept, and any reports you have filed. One cookie, to keep you signed in.
Why we are allowed to
Your account and the things you post are processed to perform the contract you entered by signing up. Reports, moderation records and rate limiting are processed under legitimate interests — keeping the site usable and abuse traceable. There is no consent-based processing here, which is why there is no cookie banner: the one cookie is strictly necessary for a service you asked for.
How long
Until you delete it. Deleting your account removes your profile, poems, responses, follows and keeps immediately. Moderation records are kept as long as the account existed, because a public ledger with holes is not a record. Backups are retained 30 days and then destroyed.
Your rights
Download everything we hold about you, as JSON, from your account page — no request and no waiting. Delete your account from the same page. If you are in the UK or EU you can complain to your supervisory authority; in the UK that is the ICO.
Who else sees it
Supabase hosts the database and handles authentication. Vercel serves the site, and also runs an anonymous visit counter: which page, where the visit came from, your country or region, and the rough kind of device you're on. It is not tied to a cookie or to your account — visits are identified by a hash that resets every day, so the same device cannot be tracked from one day to the next — and that data is discarded after 24 hours. Sign-in and unsubscribe links are stripped of anything identifying before the counter ever sees them. Sentry receives an error report when something on the site breaks: the page it happened on, the browser, and the technical detail of the fault. It is configured not to send your account details or the contents of what you were writing, and it does not record your session or your browsing. Those four are the only processors. We do not sell or share your data. What you publish is visible according to the setting you chose on each poem — public, members only, unlisted, or only you. Your name, bio, website, pronouns and forms are public. Your photo and where you are can only be seen by signed-in members. We shrink your photo to a small square and remove the details hidden inside it, such as where it was taken. We keep it with the rest of your profile and delete it when you replace it, remove it or delete your account.