Privacy Policy

Last updated: 2 June 2026 · hush (pssthush.com)

1. What we don't collect

We do not collect or store your name, email address, phone number, or any account credentials for posting or reading secrets. A posted secret has no field linking it to a person.

2. What we do handle

• Content you submit — the text of a secret, its category, reactions, and any replies, plus a timestamp. None of it is tied to your identity.
• A salted hash of your IP address — used only to enforce rate limits and block abuse. We compute a one-way hash (we do not store your raw IP), keep it in a short-lived log that is not linked to your content, and purge it on a schedule.
• A random device ID — generated in your browser and stored locally to stop double-reactions and double-reports. It is sent to us (in hashed form) only when you report a secret, and is never linked to secrets you post.
• Coarse location & device type — a two-letter country code and "mobile/desktop", used only for aggregate analytics. Never linked to an individual secret.

3. Cookies & local storage

We use your browser's local storage for functional purposes only — your device ID, which secrets you've reacted to or reported, and your view preferences. We do not use advertising cookies or third-party tracking pixels. The ads we show are served by hush itself (see Advertising below) and set no advertising cookies. If we ever added a third-party ad network, its cookies would load only after you opt in through a consent prompt — and never for pssthush+ members.

4. Moderation

To keep people safe, new posts are automatically screened for harmful content using keyword filters and an AI moderation model. Content flagged as harmful or illegal may be hidden and reviewed by our moderators. Posts indicating a personal crisis may trigger a supportive resource message shown to the author.

5. How long we keep things

Secrets drop out of the public feed after a set window (currently 72 hours). Behind the scenes, content and moderation records are retained for a limited period for safety and abuse-prevention, then purged. Rate-limit and traffic logs are short-lived.

6. Service providers

We rely on a few processors to run hush: Supabase, AWS (backend), Cloudflare (content delivery, security & routing), email services, and various LLM Models such as OpenAI, Anthropic etc. for AI moderation of post text. Each processes data only to provide their service. (We serve our own ads and do not use a third-party ad network; if that changes, the network would be listed here.)

7. Advertising

hush is free, and we show a limited number of ads to non-members to keep it running. Our ads are served by hush itself — not by a third-party ad network — which means:

• No third-party ad cookies or trackers. We don't set advertising cookies and don't share any data with advertisers. Ads are chosen only from coarse, non-identifying context (such as a two-letter country code and mobile/desktop) — never from the content of your secrets.
• Aggregate measurement only. We count ad impressions and clicks in aggregate to report performance to advertisers. These counts are not linked to any individual or to any secret you post.
• Members are ad-free. pssthush+ members see no ads at all.
• If we ever add a third-party ad network for extra inventory, it would be disclosed here and gated behind a consent prompt where required — and you could decline and keep using hush.

8. Children

hush is for adults (18+). It is not directed to children, and we do not knowingly collect data from anyone under 18. Sexual content involving minors is strictly prohibited, automatically flagged, and reported.

9. Your choices & contact

Because posts are anonymous, we usually cannot identify which content is "yours." You can clear hush's local storage in your browser at any time. For privacy questions or requests, contact hey@pssthush.com.

10. Changes

We may update this policy; material changes will be reflected by the "last updated" date above.