Privacy: we know less about you than your browser does

Tracking

We do not use analytics, ad networks, pixels, heatmaps or social plugins. Nothing on these pages loads from anybody else's server, so nobody else hears that you were here.

The one thing saved on your device

Tap the 18+ button and your browser stores cpss18 with the value 1, in local storage and in a first-party cookie good for a year. It only remembers that you already answered the age question. It does not identify you and never leaves your browser except to tell this site the same thing. Clear the site's data and it is gone.

The server

The site lives on a rented server with access logs switched off, so regular visits are not written down. If a request fails, the server records an error that may include the IP address and the page asked for. We read those only to fix what broke.

Clicking through to Candy

Our Candy links carry via and fp_sid, two parameters that say this site sent you. They say nothing about you. Once Candy's page loads, Candy's privacy policy and Candy's cookies are in charge. The Clona link carries no code at all.

The contact form

Use the contact form and we get exactly what you typed: a name if you gave one, your email address, the topic and the note. It goes straight to our own server, where we read it, and it is deleted after 30 days at most. Your address is for answering you, period. No newsletter, no list, no sharing.

Spam control: the server runs your IP address through a keyed one-way scramble and uses the result only to cap how many notes one connection can send in an hour. The IP itself is never stored, and the scrambled version is wiped within two hours. Want to know what we have, or want it gone? Ask through the form and it is done.

Grown-ups only

Under 18? Close the tab. We never knowingly collect anything from minors, and if one writes to us anyway, the message gets deleted.