Privacy Policy

Last updated: 2026-02-27 (Asia/Manila)

What We Collect

Anonymous posting data

• Thought posts: author, message, color, created timestamp
• Guest letter submissions: recipient, body, anonymous sender alias, status/timestamps

Account and profile data

• Email, username, display name
• Password credential data handled by our auth system
• Profile fields such as bio and profile image
• 2FA data (secret and backup codes) if enabled

Session and security data

• Session metadata, token/expiry records
• IP address and user-agent in session records when available
• IP-derived rate-limit/security keys for abuse prevention

Cookies and Local Storage

• Authentication cookies are used to keep users signed in.
• Browser localStorage stores anonymous thought author text for convenient re-use.

Why We Process Data

• Provide and secure app features
• Operate moderation and anti-abuse controls
• Send account/security emails
• Improve reliability and performance

Tools and Providers

The app uses providers for auth, database/cache, storage, analytics, anti-bot, CAPTCHA, and email delivery.

International Data Transfers

Data may be processed in countries where our service providers operate, which may be outside your country of residence.

Retention

Thoughts are intended to remain on the service as persistent posts, and users cannot delete a Thought in the app at this time. If we remove or limit content for moderation, safety, legal, or operational reasons, it may be soft-deleted first. Soft-deleted thoughts, letters, and replies are eligible for permanent deletion after about one month when purge jobs run.

Children

If we learn an account is below the minimum legal age in their jurisdiction, we may remove content and disable or delete the account.

Contact

Privacy questions: support@stickythoughts.app