Security and privacy
Security and data protection
Where your data lives, who touches it, and what we never do.
A company of the Republic of Cyprus, built to the GDPR.1 / 5
Our servers are in Cyprus.2 / 5
Every connection is encrypted.3 / 5
No trackers, no advertising, no data brokers.4 / 5
Your questions leave without your name on them.5 / 5
How your account is kept
- Password
- At least 12 characters, stored only as a hash. We do not know it.
- Session
- One live session per account. A new sign-in signs out every other device.
- Verified before the desk opens. Mail leaves from [email protected].
- Rate
- Limits per account and per network, so a stolen session cannot empty the shelf.
- Backups
- Nightly, tested to restore.
- Closure
- Delete threads whenever you like. The account is deleted within 30 days of closing.
What we do not do
- We do not sell data.
- We do not show advertising.
- We do not read your threads, except for a fault you report.
If something goes wrong
Write to us. We investigate every report, tell those affected without delay, and publish what we learned. The address for security researchers is in the site's security.txt.