Sblurp

Privacy

Draft. This policy is a first draft and is not final. It describes how sblurp.chat works today, in plain words.

What sblurp.chat stores

  • Your email address, username and a hash of your password (argon2id). We never store the password itself.
  • Whether you confirmed your email.
  • From your date of birth: that you are 13 or older and whether you are 18 or older. If you are under 18, we keep the date you turn 18, so the flag can change on that day. We do not keep the date of birth itself.
  • The profile you choose to fill in: display name, avatar, bio and pronouns.
  • If you turn on two-factor sign-in: the secret your authenticator app uses, and hashes of your recovery codes.
  • If you add passkeys: each one's public key, the name you give it, and when it was added and last used. The private key never leaves your device.
  • Your active sign-ins: when they started, the last IP address and the browser name, so you can see and end them.
  • The app settings you choose to sync: its appearance, and the addresses of the communities you added, in your order, so they follow you to your other devices.

What it does not store

Messages, channels, files and member lists. Those live on each community's own server, and the people who run that server are responsible for them. Ask them how they handle it.

What we share, and with whom

When you join a community, it receives a sign-in token with your account id, username, whether your email is confirmed, and the two age flags. Your profile goes to a community only after you agree in the app. We share nothing with advertisers, data brokers or analytics companies, because we do not work with any.

Email

We send email only to confirm your address, to reset your password, and to tell your old address when you change it. No newsletters unless you ask for one.

Cookies

Two cookies, both needed for the site to work: one keeps you signed in, one protects forms against forgery. No tracking cookies.

Getting a copy

Download everything above as a JSON file from your account page, under Your data.

Deleting your account

Delete it any time from your account page. Your account, profile, avatar and sign-ins are removed from sblurp.chat right away. Communities you joined keep their own copies of your messages; ask their admins.

Questions

Write to [email protected].

By post:

Sblurp
495 Jackson Street #1200
Oakland CA 94607
United States