Privacy

What this site knows about you, in full.

An anonymous reading room has one obligation above all others: to be specific about anonymity. This page lists what is stored, why it exists, how long it lives, and which outside services ever see anything.

Last updated

01No account, and what replaces one

You do not create an account to read or to write here. There is no email field, no password, and no sign-up step to skip.

Instead, your browser sends a device fingerprint once: coarse, non-identifying signals such as browser family, operating system family, screen characteristics and a few hashed rendering results. The server combines them into a single opaque identifier and keeps only that identifier alongside a hashed form of some components. Your raw fingerprint values are never returned by any endpoint, and are never displayed on this site.

That identifier lets the service recognise the same browser next time so a writer keeps their drafts, their byline and their edit rights. It is not a name, and it cannot be used by another user to find you.

02What is stored, and for how long

Your drafts and published stories
Until you withdraw them or moderation removes them. A withdrawn draft is deleted; a published story that is taken down keeps a private record of the decision.
Your notes and replies
Until you remove them or moderation removes them. Editable for 15 minutes after posting, then fixed.
Abuse-audit records
For each write: an HMAC of your IP address, your browser's user-agent string, the device identifier, and whether a human check passed. Retained for 180 days, then purged automatically. This exists so a threat can be traced and a spam wave can be stopped — it is the one place where writing here is not perfectly anonymous, and it is said here rather than buried.
Reports you file
The target, the reason you chose and any details you typed, kept with the resolution. Visible only to moderators.
Reading preferences
Font size, column width, theme and your saved shelf are stored in your own browser's local storage — not on our servers, and not tied to the device identifier. Clearing site data removes them.

03What is never collected here

  • No advertising identifiers, and no advertising on this reader.
  • No third-party analytics, session recording, or heatmaps.
  • No cross-site tracking: this reader sets no tracking cookie and has no social embed that could.
  • No location beyond the coarse country hint the server may use to make a lawful-request decision; it is not stored with your story.
  • No reading history told back to you, and nothing shared with the parent Confessit feed. What you read here stays here.

04Third parties that do see something

Cloudflare Turnstile
The human check on the write and reply forms. It runs in your browser and receives the signals needed to decide whether you are a person. It is the only third-party script loaded on a form page, and it is absent from every reading page.
Cloudflare (hosting and CDN)
Serves this site and sees the request in transit, as any host does.
Our own database
Story text, notes, the device identifier and the audit records above. Self-hosted; not sold, and not shared with a data broker.

There is no other processor. If that changes, this page changes on the same day and the date at the top moves with it.

05Cookies and local storage

This reader sets one cookie: your colour theme, so the page does not flash white when you load it in dark mode. That is it — no session cookie, no consent cookie, no analytics cookie.

Everything else is local storage in your browser: your reading preferences, your saved shelf, and a local copy of any draft you are writing. It never leaves your device unless you press save or submit.

06Your requests

Because there is no account, a deletion request is verified by proving control of the device identity that wrote the content — which is why the audit trail above exists. Write to privacy@confessit.lol and say what you want removed. We aim to answer within 30 days.

You can also act immediately, without asking: withdraw a draft from the writer, remove your own note, or clear site data to erase everything stored locally.

07Children

Untold is not for people under 18. Accounts are not created here, but writing and reading are still intended for adults, and content may deal with adult experience.

08Changes

When this policy changes, the date at the top changes and the change is noted in the legal hub. Nothing here is rewritten quietly.

Who to write to