Privacy

Signing up takes a username, a password and an avatar. No email. No phone. No real name. Here is every piece of your data we hold, and why.

Username

What you log in with. Nobody else ever sees it, not even next to your rants.

Password

Held by Supabase Auth as a bcrypt hash. Nobody can read it back, us included.

Anon handle

Your public name, like FedUpFox42. Generated for you, not chosen.

Avatar

Which of the 30 icons you picked.

Recovery code

Stored only as a bcrypt hash. You see it once, at signup. Using it to reset swaps it for a new one, also shown once.

Failed-login IP hash

Only when a login or reset fails, and only for 24 hours. Your account itself holds no IP. The sections below say why.

What you post

Your rants, comments, images and reactions, with the time you sent them. Images without their hidden data.

Reports

Any rant or comment you flag, your reason and the time. Only the admins who review them see them.

Hashtag affinities

Which hashtags you post, comment and react under. It shapes your For You feed. Only you and the server read the scores, but the rants and comments they come from are public.

Age confirmation

The time you ticked the 13-or-older box. We never ask for your birthday.

Internal address

Supabase Auth wants an email field, so every account gets a random address at lodaai.users that goes nowhere. It isn't yours and nobody sees it.

Humans only. While you fill in the signup form, your device solves a short puzzle: a second or two of number-crunching in your browser. Bots have to do the same work for every account they want, which makes flooding the wall slow and expensive.

No CAPTCHA. No third party. No cookie. It reads nothing from your device and tells us nothing about you. It only works for the username you pick, so one solve makes one account.

We never store or log your IP address itself. Signing up keeps no IP, not even a hash, and your account holds none. Logging in adds none either.

The only IP we keep is a salted hash, a one-way scramble with a secret of ours mixed in, and only when a login or password reset fails. It stops people guessing their way into accounts, and it is deleted after 24 hours. It is never shown to anyone and never linked to your public handle.

A photo keeps the picture and nothing else. Phones hide a lot inside an image: the GPS location it was taken at, the time, the camera make, model and serial number, sometimes the owner's name.

All of it is removed on our server before the image is checked or stored, whatever app or device sent it. Only the pixels go on.

A wrong password or a wrong recovery code is logged, to stop people guessing their way into accounts. Each record is a hashed IP, a hashed username and the time. Never the username itself, never the password you tried.

The records are deleted after 24 hours: every hour, a job clears every record older than that. A successful login clears that account's failed logins. A successful reset clears its failed logins and its failed resets.

Image checks are rate limited. Every image you attach costs us a check, so each account only gets so many, and so does the whole site each day. Text rants never count.

Each check is logged: a hashed account id and the time. Never your account id itself, never the image, and no IP address, not even a hash. The records are deleted after 24 hours: every hour, a job clears every record older than that.

Session cookies only: the ones that keep you logged in. Supabase Auth sets them when you log in, and logging out clears them. No analytics. No ad trackers. No tracking pixels. No fingerprinting.

A rant you are still writing is kept in your browser's session storage, so it survives the detour through signup. It stays on your device until you post it and is gone when you close the tab.

Three companies. Nobody else.

Supabase

Runs our database, the login system and image storage. Everything above lives there.

Vercel

Hosts the site. Like any host, it sees the IP address of each request in order to answer it.

Sightengine

Checks every image you attach for explicit content before it is published. The image goes to them first, with its location and camera data already removed. If it fails, we never store it.

We never sell your data. We don't rent it, trade it or hand it to advertisers. There are no advertisers.

Your anon handle, your avatar, and what you post under them. Your handle is the only link between your rants and comments. Nothing public carries your account id, your username, your recovery code or when you signed up. Nobody can list the handles on the site: a handle shows up only on what it posts, and on its own page for anyone who already knows it. Rants and comments can't be edited or deleted by you yet, so think before you name names.

Get a new handle and your earlier rants and comments show the new one.

Reactions show only as counts: how many fires, how many hugs. Never who pressed them. They are not linked to your handle or your account anywhere public, and the site shows which ones you pressed only to you.

Reports are never public. The admin queue shows what was flagged and why, never who flagged it.

Lose your password and your recovery code and the account is gone for good. We have no email or phone to check who you are, so nobody can prove the account is yours. Not even us. Keep the code somewhere safe.

LODA AI is for people aged 13+. You confirm it with a checkbox at signup. We don't ask for your date of birth. The Terms have the rule in full.

If what we store or who touches it changes, this page changes first, and the date at the top moves.