Privacy Policy

Last updated: 2 June 2026 · hush (pssthush.com)

1. What we don't collect

We do not collect or store your name, email address, phone number, or any account credentials for posting or reading secrets. A posted secret has no field linking it to a person. There is no account, and you never need one.

The single exception is described in Email notifications below — and it is deliberately built so that an email address can never be connected to a secret.

2. What we do handle

• Content you submit — the text of a secret, its category, reactions, and any replies, plus a timestamp. None of it is tied to your identity.
• A salted hash of your IP address — used only to enforce rate limits and block abuse. We compute a one-way hash (we do not store your raw IP), keep it in a short-lived log that is not linked to your content, and purge it on a schedule.
• A random device ID — generated in your browser and stored locally to stop double-reactions and double-reports. It is sent to us (in hashed form) only when you report a secret, and is never linked to secrets you post.
• Coarse location & device type — a two-letter country code and "mobile/desktop", used only for aggregate analytics. Never linked to an individual secret.

2a. Email notifications (optional)

If you create a personal “confess-to-me” link, you may give us an email address so we can tell you when someone answers it. This is entirely optional — the link works without it.

• Double opt-in. We send one confirmation email. If you don't click it, we never email you again and the pending record is deleted within 14 days.
• Stored against the link, not against you. The record holds your email address and the link token, and nothing else — no device ID, no IP address, and no reference to any secret anyone has posted. There is no path in our data model from an email address to something a person wrote.
• What we send. Only notifications that a secret arrived through your link, and only while you stay subscribed. No newsletters, no marketing, no reminders. Every email carries an unsubscribe link.
• Deletion. Unsubscribe at any time from any email, or write to us. Unsubscribed records are purged within 30 days.
• Never shared or sold. Addresses are used solely to deliver these notifications.

3. Cookies & local storage

We use your browser's local storage for functional purposes only — your device ID, which secrets you've reacted to or reported, and your view preferences. We do not use advertising cookies or third-party tracking pixels. The ads we show are served by hush itself (see Advertising below) and set no advertising cookies. If we ever added a third-party ad network, its cookies would load only after you opt in through a consent prompt — and never for pssthush+ members.

4. Moderation

To keep people safe, new posts are automatically screened for harmful content using keyword filters and an AI moderation model. Content flagged as harmful or illegal may be hidden and reviewed by our moderators. Posts indicating a personal crisis may trigger a supportive resource message shown to the author.

5. How long we keep things

Secrets drop out of the public feed after a set window (currently 72 hours). Behind the scenes, content and moderation records are retained for a limited period for safety and abuse-prevention, then purged. Rate-limit and traffic logs are short-lived.

6. Service providers

We rely on a few processors to run hush: Supabase, AWS (backend), Cloudflare (content delivery, security & routing), email services, and various LLM Models such as OpenAI, Anthropic etc. for AI moderation of post text. Each processes data only to provide their service. (We serve our own ads and do not use a third-party ad network; if that changes, the network would be listed here.)

7. Advertising

hush is free, and we show a limited number of ads to non-members to keep it running. Our ads are served by hush itself — not by a third-party ad network — which means:

• No third-party ad cookies or trackers. We don't set advertising cookies and don't share any data with advertisers. Ads are chosen only from coarse, non-identifying context (such as a two-letter country code and mobile/desktop) — never from the content of your secrets.
• Aggregate measurement only. We count ad impressions and clicks in aggregate to report performance to advertisers. These counts are not linked to any individual or to any secret you post.
• Members are ad-free. pssthush+ members see no ads at all.
• If we ever add a third-party ad network for extra inventory, it would be disclosed here and gated behind a consent prompt where required — and you could decline and keep using hush.

8. Children

hush is for adults (18+). It is not directed to children, and we do not knowingly collect data from anyone under 18. Sexual content involving minors is strictly prohibited, automatically flagged, and reported.

9. Your choices & contact

Because posts are anonymous, we usually cannot identify which content is "yours." You can clear hush's local storage in your browser at any time. For privacy questions or requests, contact hey@pssthush.com.

10. Changes

We may update this policy; material changes will be reflected by the "last updated" date above.