Privacy
Last updated 26 August 2026
The short version. We cannot tell you who sent a message, because we do not keep anything that would let us. We never sell that information, at any price, and we never will. That is not a policy we could quietly change later: the data to do it does not exist.
What we store
- Your username and the secret token that opens your inbox.
- The messages you receive, and when they arrived.
- Your email, only if you chose to add one. We never ask for it at signup and the service works completely without it.
- Your theme and prompt settings.
What we deliberately do not store
- Who sent a message. No account, no device id, no name.
- Sender IP addresses. To stop one person flooding one inbox we keep a one-way cryptographic hash of the sender's IP combined with the recipient's name. A hash cannot be turned back into an address. It is enough to count, and useless for anything else.
- Location, contacts, or anything from your device.
- Third-party tracking or advertising profiles built from your messages. Your messages are never used to target ads.
How long we keep things
On the free plan, messages are kept for 30 days and then deleted. On Pro they are kept until you delete them. Rate-limiting hashes are discarded after an hour. Deleted means deleted, not hidden behind a flag.
Deleting everything
Open your inbox, go to Settings, and choose to delete your account. Your username, your link and every message are removed immediately and the username becomes available to someone else. There is no recovery, no grace period and no archived copy.
Messages we hold back
Messages that threaten someone or encourage self-harm are stored but never delivered. We keep them because a real threat may need to be handed to the police, and deleting the only record of it helps nobody. They are not visible to the recipient and not visible to anyone at all unless a formal legal request arrives.
Who else sees your data
The site runs on Cloudflare, which hosts the pages and the database and provides the bot protection on the message form. Payments, if you subscribe, are handled by Polar, which receives your billing details directly. We never see or store a card number.
We show ads on the free plan. Ad providers set their own cookies and have their own policies. They receive no message content and no account information from us.
Age
You must be at least 13 to use Psst. If we learn an account belongs to someone younger, we delete it.
Your rights
You can see everything we hold about you in your inbox, and delete all of it from Settings without asking anyone. For anything else, write to hello@psst.link.
← Back to Psst