Privacy

We store account email, password hashes, login-session records, content and participation records to operate the service. Email and private account fields are excluded from public profiles. Usernames and stable public user IDs identify public contributions. Profile visibility and reply/mention notifications are adjustable in settings. We do not provide marketing-message preferences or private messaging here.

Use account settings to request a personal-record export or account deletion. Requests require your current password. Exports contain account records and owned-content inventory; media and other authors' content are excluded.

Optional preference imports store coarse interests, explicit ratings, source identifiers, confidence and observation/import times with your consent. Credentials are encrypted and excluded from exports. Raw social posts, titles and descriptions are not stored. Disconnecting removes imported signals and credentials, stops future imports and expires stored exports; account deletion removes linked sources too. Missing likes are never dislikes. On-platform feedback remains stronger, and Surprise Me does not use imported preferences. Provider connection setup is not yet available.

This is the invite-only policy configuration (2026-09-28-v1), subject to operator review. It is not a legal or compliance certification. Public launch requires policy and delivery review.