Privacy policy

Draft for the invite-only beta. To be reviewed by a lawyer before the site opens to the public.

What we keep

• Your email, to send sign-in codes. It's never shown to anyone.
• Your profile: username, name, bio and photo. Public.
• That you're 18 or older. We check your date of birth when you join but don't keep it.
• Your area. When you use your location, it's rounded to about a mile before it's used, and only the nearest town's name is ever shown. We never keep or show your exact location. We look up the town on our own servers; your location isn't sent to other companies.
• Your photos, with the hidden data phones add (including the exact place a photo was taken) removed before they're stored.

Messages

Messages are encrypted when sent and stored, and deleted on schedule: snaps once they've been viewed, chat messages 24 hours after they're read, unless both people choose to save them. They aren't end-to-end encrypted, so they could be seen by us if reported or required by law.

Moderation

Photos are checked automatically (by Amazon's image-checking service) for nudity and violence before anyone sees them. Anything removed for breaking the rules is kept, together with why it was removed, in a private area only the site's owner can see. It may be used to train our own moderation tools. This applies even to disappearing snaps and survives deleting your account. Material involving the abuse of children is never used for this; it is reported to the National Center for Missing & Exploited Children and kept only as the law requires.

Deleting your account

Settings → Delete my account removes your profile and posts straight away (except content removed for breaking the rules, as above).

Sharing

We don't sell your information or show you ads based on it. We share it only with the services that run the site (Amazon Web Services for hosting, email and image checks) or when the law requires.

Town names: GeoNames (geonames.org), CC BY 4.0.