Privacy

The short honest version: we store almost nothing, on purpose.

What we store

• Age gate: a signed cookie on your device saying a check passed, plus an anonymous log line (state, method, pass/fail). Identity documents and face images never touch our servers — age verification, where required, is performed by a third-party provider that returns only pass/fail.
• Accounts (optional): a username and a password hash. No email, no phone number — we could not identify you if we wanted to.
• Analytics: self-hosted, first-party only (no Google, no ad trackers). IP addresses are anonymized in logs.
• Messages: kept until you delete them or, for images you send, auto-deleted after 24 hours (unless reported — reported content is preserved for legal review).

What we never do

• Sell or share data with anyone.
• Run third-party trackers or ad pixels.
• Require email or identity to browse or register.