Security & Privacy

Protecting your identity

• No accounts, ever. There's no sign-up, no login, no email, no password. You can't leak credentials that were never created.
• No cookies, no tracking. This site doesn't use analytics, ad trackers, or any third-party scripts that follow you around the web. There's nothing installed here to profile you.
• Nothing links your posts to you. A username is entirely optional and never verified — it's just a label, not an identity.
• Anonymous names in chat. Chat usernames are randomly generated in your own browser (things like "Liberty Eagle 42") and never tied to anything else you do on the site.
• We don't log your IP address. Basic rate limiting happens in memory for a few minutes to block spam bursts, but IP addresses are never written to the database or stored long-term.

Protecting your photos

Phone and camera photos carry hidden metadata — GPS coordinates, device model, timestamps — that most people never think to remove. We remove it for you, automatically, every time.

• Every photo is rebuilt from scratch on upload. We don't just copy your file — we decode the image and re-encode a brand-new file from the pixel data alone. GPS location, camera/phone model, and timestamps never make it into the copy that gets published, because that copy is never touched by the original file's metadata in the first place.
• Random filenames. Your photo is renamed to a random, meaningless string before it's stored. The original filename (which can sometimes contain a name or date) never survives the upload.
• File type and size are strictly checked. Uploads are validated to confirm they're real images, not disguised files, before anything is processed or stored.

Keeping your post under your control

• Private claim links. The moment you post, you get a one-time private link — a long, random, unguessable code, not something anyone could stumble onto or brute-force. That link is the only way to see the ratings and comments left on your post.
• Delete anytime. That same private link lets you permanently delete your post — photo, ratings, and comments — whenever you want. No customer support ticket, no waiting.
• We can't recover a lost link, on purpose. Because there's no account or email tied to your post, losing your private link means losing access to it — the tradeoff for never asking you for contact information in the first place.

Behind the scenes

• Encrypted in transit. The entire site runs over HTTPS, so traffic between your browser and the server is encrypted end to end.
• Hardened against common web attacks. A strict content security policy blocks the types of scripts and cross-site attacks that could otherwise be used to hijack a page or steal data.
• Rate-limited to blunt abuse. Posting, rating, and chatting are all rate-limited so the site can't easily be spammed or scraped in bulk.

Found a problem?

If you notice something that seems like a real privacy or security issue, please tell us on the feedback page so it can get fixed.