What we keep

Your message is stored on our server, because the picture only carries a seven-character key pointing at it. Anyone holding the picture can read the message. We do not ask who you are, and we cannot tell you apart from anyone else.

The message you write. It is kept against a random seven-character id until you delete it. It is not encrypted at rest, so treat it as readable by us.

Your picture, only while it is being processed. It is sent to our model server, marked, and returned. We do not keep a copy. Original images are only stored if that feature is switched on, and it currently is not.

A count of how many times a message was read, and how many times it was reported.

No account, no email address, no name, no advertising identifier. We do not use cookies for tracking and there is no analytics script on this site.

Our servers keep ordinary request logs, which include IP addresses, for a short period. They are used to keep the service running and to stop abuse, not to build a profile.

The site runs on Vercel, the model server on Railway, and messages are stored in Google Firebase. Each handles data on our behalf. Nothing is sold or shared for advertising.

When you hide a message, this browser keeps a token that authorises deleting it. Open your messages to remove them, one at a time or all at once. Deleting removes the message from our database; the picture on someone else's phone stops resolving to anything.

Because there is no account, that token is the only proof of authorship. Clearing this browser's storage, or opening the site on another device, loses the ability to delete those messages. If that happens, write to the address below with the id and we will remove it.

A revealed message carries a report control. Messages reported by several people stop being served and wait for a person to look at them.

The service is not directed at children under 13, and we do not knowingly collect anything from them.

Questions, or a deletion you cannot perform yourself: sunutf@gmail.com