Privacy and your data
In brief: profiles and posts can be public. A private chat does not mean its contents are inaccessible to the service. Choose what you share with this in mind.
Your profile and account
Your display name, username, profile image, bio and any city/country you add can appear on your public profile. Questions, answers and topics can be public; search engines and other people may retain copies.
Your email is not a public profile field. The service processes email, a password hash or social sign-in link, and session records for account access. New social accounts receive random nicknames; older account names are not automatically changed. A nickname does not provide full anonymity.
Review your profilePrivate messages and Shuffle
Inbox messages and attachments are stored on the server. Conversation access is restricted to participants, but messages are not end-to-end encrypted. The service infrastructure can process message content. The other person can copy what they see.
Shuffle messages are held on the server to support the temporary chat, not archived in your inbox. Do not expect to reopen the chat history after it ends. Matching, participation, ending and report records are separate from message history; ending a chat does not mean every record is erased.
Location sharing is optional
When you use a location button and grant browser permission, coordinates may be used in that search or content action. Location is not limited to a city name: coordinates may have been added to a profile or question. Treat a location attached to a question as public content.
People-discovery distances use an approximate area; this does not erase stored coordinates or make your location completely hidden. Some search links can include location information. Check the address before sharing a link. Revoking browser permission does not delete a location already submitted.
Records on your device and in the service
Session cookies keep you signed in; language and some interface preferences may also be stored on your device. Question, answer, topic and topic-entry drafts may be saved in this tab's browser storage before publication. Signing out does not delete these drafts; they are not restored 24 hours after the last edit. On a shared device, clear your draft and sign out when finished.
IP addresses, browser/device details, request and session times, and security/moderation records are processed to operate the service. Hosting, traffic delivery, email delivery and your chosen social sign-in provider may process relevant data. This page does not promise a fixed retention period for every data category.
Check your signed-in sessionsYour controls and the limits of deletion
Privacy preferences control whether guest accounts can start direct conversations with you and whether you appear in the online list. You can block someone from their profile and report problems through the available controls. Turning off online visibility does not hide your public profile.
Removing your own message hides its content in the normal chat view; the current operation does not fully erase the database record. It cannot recall previously viewed or downloaded copies. You can permanently delete your account and see a summary of your records at Settings → Account & data (or /settings/account after signing in); no reinstall is needed. Deletion anonymises your identity, removes your sessions and notification records and hides the content of messages you wrote; the other party's conversation record and pseudonymous community ledger receipts are retained.
Open privacy preferences