The F-Word

Your data

Privacy

What this site keeps about you, why, and for how long — in plain words.

Reading needs nothing from you

You can read every article without an account. There are no advertising or third-party tracking scripts on this site. To count readers, each page view records the page, the referring site, the kind of device, and a code made by hashing your IP address and browser together with a secret that changes every day. The code cannot be turned back into your IP address, and it stops matching you the next day. Raw IP addresses are not stored. Page-view records are deleted after 400 days.

If you create an account

We keep your email address, the name and handle you choose, an optional bio, a securely hashed password (never the password itself), and, if you turn it on, your two-factor secret. Signing in with Google or Apple shares your name, email address and profile picture from that account. Your comments, likes and saved articles are stored so you can see them again. A single sign-in cookie keeps you logged in; it is not used for anything else.

Comments

Comments are public under your name. They are checked by an automatic filter and may be held, hidden or removed by a moderator under the community guidelines. Moderation decisions are recorded in an internal log that only administrators can see.

Who processes the data

The site runs on Vercel. The database and uploaded images are held by Supabase, in Tokyo, Japan. Account emails (address confirmation and password resets) are sent through Resend. Each of them processes data only to provide that service. Nothing is sold or shared for advertising.

How long things are kept

  • Your account, comments, likes and saves: until you delete them or the account.
  • Email confirmation and password-reset links: expire within a day, deleted after a week.
  • Anonymous page-view counts: 400 days.
  • Security and moderation log: 400 days. It records actions, not the content of your comments.

Deleting your account

Signed in, go to your profile and use “Delete your account”. Your profile, likes, saved articles and comments are removed immediately. Where someone else has replied to one of your comments, your comment is replaced with “[removed]” so their reply still makes sense. Copies in the database provider’s backups are overwritten on their normal schedule.