We do not collect or store your name, email address, phone number, or any account credentials for posting or reading secrets. A posted secret has no field linking it to a person.
We use your browser's local storage for functional purposes only — your device ID, which secrets you've reacted to or reported, and your view preferences. We do not use advertising cookies or third-party tracking pixels.
To keep people safe, new posts are automatically screened for harmful content using keyword filters and an AI moderation model. Content flagged as harmful or illegal may be hidden and reviewed by our moderators. Posts indicating a personal crisis may trigger a supportive resource message shown to the author.
Secrets drop out of the public feed after a set window (currently 72 hours). Behind the scenes, content and moderation records are retained for a limited period for safety and abuse-prevention, then purged. Rate-limit and traffic logs are short-lived.
We rely on a few processors to run hush: Supabase (database & hosting), Cloudflare (content delivery, security & email routing), Resend (staff sign-in emails), and Anthropic (AI moderation of post text). Each processes data only to provide their service.
hush is for adults (18+). It is not directed to children, and we do not knowingly collect data from anyone under 18. Sexual content involving minors is strictly prohibited, automatically flagged, and reported.
Because posts are anonymous, we usually cannot identify which content is "yours." You can clear hush's local storage in your browser at any time. For privacy questions or requests, contact hey@pssthush.com.
We may update this policy; material changes will be reflected by the "last updated" date above.