Privacy Policy

This page is maintained by the operator of this HushBox instance to explain how the platform handles participant, creator, and administrator data. It is not independent verification.

Anonymous submissions

When you submit a confession without signing in, we do not collect or store your name, email, IP address, device information, or precise location. Submissions are identified only by a private tracking code that is shown once at submission and hashed at rest.

Rate limits and abuse prevention

To prevent spam, we compute short-lived hashed identifiers derived from request metadata. These records are auto-deleted on a rolling schedule and are never shown to creators or joined to your confession.

Optional participant accounts

If you create a participant account, we store your email, display name, and an HMAC of your account id on each confession you choose to link. Creators still never see your name, email, or account id — the HMAC is only used server-side to answer "which of my submissions is this?" for you.

Creator and administrator data

Creators and administrators have accounts with email addresses, display names, and role assignments stored server-side. Privileged actions are recorded in an audit log that admins can review.

Cookies

We use only functional cookies and browser storage required to keep you signed in and to remember your language preference. We do not use advertising cookies, third-party analytics, or fingerprinting.

Data retention

Submissions are retained for as long as the associated campaign exists. Abuse records are purged automatically. You can request deletion of your account and linked submission history at any time by contacting the operator.

Contact

For privacy questions or deletion requests, reach out to the operator of this instance.