crunch

privacy policy

plain language. last updated May 2026.

what we collect

Your email address (used for login and password reset only). Everything you post — text, photos, tags, reblogs, likes, bookmarks, follow relationships. Impression data: we log when a post is viewed to power the void counter. IP addresses in server logs, retained briefly for abuse prevention.

what we don't collect

Advertising identifiers. Third-party tracking pixels. Behavioural profiles. We have no analytics SDK on the site. There are no ads, there is no ad tech, there is no data broker relationship. Ever.

anonymous asks

When you send an anonymous ask, the ask record itself contains no sender information — it is cryptographically unrecoverable from the row in our database. A separate audit table stores a one-way hash of your IP address at send time, accessible only to service-level admins, and is automatically purged after 90 days. This exists solely to allow us to investigate abuse if a blog owner reports it.

impressions and the void counter

We count when a post is viewed. This count is shown to the post's author as the void counter. The count is aggregated — we don't expose a list of who viewed a specific post to anyone, including the author.

direct messages

DMs are stored in our database and are visible only to the participants. We do not read them except in response to a formal abuse report requiring human review.

third parties

Supabase — our database and authentication provider. Your data lives on their infrastructure, governed by their data processing agreement. Object storage — media you upload (photos, audio, video) is stored in an S3-compatible bucket. No other third-party services receive your data.

data export

You can export all your posts as a JSON file at any time from Settings → export. We believe your data is yours.

account deletion

Deleting your account soft-deletes your posts immediately — they stop appearing on the site. Hard deletion happens within 30 days. Some data (like the fact that you liked or followed something) may remain in aggregate counts for a brief period.

contact

Privacy questions go to the contact form. We'll respond.