Privacy Policy
Last updated: September 2026
1. What we collect
When you submit an echo, we temporarily store its content and your IP address solely to enforce rate limits and prevent your echo from being served back to you. If you create an anonymous identity, we store your chosen animal name and a hashed version of your PIN. We do not store your real name, email, phone number, or any identifying information.
2. How long we keep it
Echoes are automatically and permanently deleted after their expiry period (default: 10 days). IP addresses are kept in memory only for the duration of a rate-limiting window (1 hour) and are never written to disk in identifiable form. Anonymous accounts (animal name + hashed PIN) are retained until you request deletion.
3. Who sees your data
Nobody. Echoes are displayed to random strangers with no attribution. We do not sell, share, or transfer your data to any third party. We do not use advertising networks.
4. Analytics
We use Plausible Analytics — a privacy-first, cookieless tool that does not track individuals, does not use fingerprinting, and is fully GDPR-compliant. No consent banner is required. No data is shared with Google or Meta.
5. Cookies
We do not use cookies. If you create an anonymous identity, your session token is stored in your browser's localStorage and never sent to third parties.
6. Your rights
You have the right to request deletion of any account or content associated with your anonymous identity. Because echoes are not linked to any personal identifier by default, we cannot delete individual echoes submitted without an account — they expire automatically. To request account deletion, email us at [email protected].
7. Children
Unheard is intended for users aged 16 and over. We do not knowingly collect data from children under 16.
8. Contact
Privacy questions: [email protected]