Privacy policy
The short version: there are no accounts, no tracking cookies, and no advertising. One measurement script does run, added by Cloudflare rather than by this site; the Measurement section below says exactly what it sees. Below is exactly what does exist.
What is stored on your device
Three values live in your browser's local storage and never leave it except as described below: your theme choice, your language choice, and a random follow token if you have followed anyone. Clearing your browser data removes all of them.
What is stored on the server
- Follow lists. If you follow a creator, the server keeps the random token from your browser next to the names you follow. The token is not linked to your identity, your address, or anything else about you. Anyone holding the token can see that list, which is why the feed address should be treated as private.
- A short-lived cache. Album and profile details are cached for a few hours so repeat visits are fast. This holds public information from the source, not information about you.
- Ordinary web server logs. The web server records requests as any web server does. These are operational records, not a profile of you.
What is never stored
- The media you download. It streams through and is not written to disk.
- A history of what you looked up or downloaded, tied to you.
- Any account details, because there are no accounts.
Third parties
Thumbnails and downloads are proxied through this server rather than loaded from the source directly, so browsing here does not disclose your address to the source host. There is no advertising script on this site.
Measurement
This site adds no analytics tag of its own: no Google Analytics, no advertising pixel. Cloudflare Web Analytics is running, and it is worth being precise about it because it is easy to miss. The script is not in the page this server sends; Cloudflare inserts static.cloudflareinsights.com/beacon.min.js into the response at its own edge, so it is invisible to anything that fetches this site with a command-line tool and appears only in a real browser.
It reports the page address, the referring page, your approximate location and device type, and timing figures. Cloudflare states that it uses no client-side state for this — no cookie, and no identifier stored in your browser. It is switched on in this site's Cloudflare settings rather than in this code, so turning it off there removes it from every page at once. Any content blocker stops it, and nothing on this site breaks when you block it. The links you paste are never sent to it; those are handled by this server and never leave it as a link.
What the source host can and cannot see as a result, and what proxying does not protect you from, is explained in does Erome know when you download.
Removing your data
Unfollow everyone to empty your list, or simply stop using the feed address and clear your browser storage. To have a follow list deleted server-side, send the feed address to [email protected].