Privacy Policy

Last updated: July 2026

What we collect

When you sign in via GitHub or LinkedIn, we store your name, email address, and profile picture URL. When you sign up with email and password, we store your name, email address, and a bcrypt hash of your password — never the password itself. Your email is encrypted at rest.

What we do with it

We use your name and avatar to display your posts. We use your email to identify your account. We don't sell your data. We don't share it with anyone except the service providers listed below, who need it to do their one job.

Emails we send

If you sign up with email, we send you a verification link. If you forget your password, we send you a magic login link. That's the complete list — no newsletters, no "we miss you", no product updates. These emails are delivered through Brevo, a third-party email service that sees your email address for that purpose.

Your posts

When you submit text, it is sent to a third-party LLM for transformation. Only the transformed version is stored and displayed. Your original text is not retained. Occasionally we also generate an image for a post by sending the transformed text (not your original) to a third-party image generation service. At email signup, your name is sent to the same LLM to generate your satirical bio.

Analytics and error monitoring

We use Umami, a privacy-focused analytics tool. No cookies, no personal data collected, no cross-site tracking. When something breaks, error details (which may include request data) are sent to Sentry so we can fix it.

Server logs

Our server logs include your IP address, which we also use for rate limiting sign-in attempts. Logs are kept briefly and are not used for anything else.

Cookies

We use a single session cookie to keep you logged in. That's it.

Deleting your account

Email [email protected] and we'll delete everything.

Contact

Mandatory Fun PTY LTD (ABN 50 696 825 662). Email: [email protected]