Privacy

What you give us

• Username, display name, and bio.
• A profile photo, if you add one. Location and other metadata are removed before it is stored.
• Posts: text, and one photo if you attach one. Photo metadata is removed the same way.
• Replies you write on a post.
• Emoji reactions you add to a post or a reply.
• Follows, invites, and whether a friend invite connected two accounts.
• Links: a label and an https address, only if you choose to add them.
• Payment handles and wallet addresses, only if you choose to add them.
• An authenticator secret, stored encrypted. Backup codes are stored as hashes, not as the codes themselves.
• Passkeys: a public key and the id the authenticator uses. The private key stays on your device or in your password manager.

What we do not collect

There is no account email, no password, no ads, and no analytics. Pages do not load third-party scripts. Photos are not given a public file address. We do not sell personal information.

Who can see it

Anyone with your username can see your display name and bio. Posts, photos, replies, links, and payment details are shown to you and to followers you have approved. A pending request does not unlock them. Removing a follower hides them again. A reply or reaction inside a circulus is shown only to current members of that circulus.

Cookies

Cookies are only used to run the service. A session cookie lasts 14 days. A signup cookie lasts about 20 minutes. An invite cookie lasts 2 hours. A passkey setup cookie lasts 5 minutes. They are not used for advertising. The session stored on the server is a hash of the cookie, not the cookie itself.

Connection data

Failed sign-in attempts are counted by username and by IP address so a guessed code can be locked for 15 minutes. Those records are deleted after 24 hours. The site is hosted on Cloudflare. Cloudflare processes the connection as the host, which can include IP address and request data in its own logs.

How long it stays

A post stays until you delete it. A reply stays until you delete it, and deleting a post removes its replies. A reaction stays until you tap it again, or until that post or reply is deleted. A profile photo, link, payment detail, passkey, or follow stays until you remove it. Logging out ends that session. There is no control in the product yet that deletes the whole account. If you need the account closed, write to the address below.

Children

Nos Privati is not for anyone under 18. We do not intend to store information about children.

Contact

Privacy questions go to legal@nosprivati.com.