Privacy Policy
Last updated: November 5, 2026
The short version: we don't ask who you are. There are no accounts and no email, we don't set cookies, and your IP address is never saved in our database. Anything you write in a note is public.
What you choose to share
When you post a note or reply, we save what you type: the message, plus any name, initial, age, location, date, feeling, colour or font you add. Only the message is required. All of it is shown publicly, so please leave out anything that could identify you or someone else.
What we save automatically
- A scrambled code made from your IP address, saved with each note, reply and report. It's a one-way code made with a secret key, and it lets us stop spam, duplicates and repeat reports. Your IP address itself isn't saved in our database.
- A scrambled copy of the private delete code for your note or reply. The real code stays with you.
- The date and time you posted, and the language of your note.
Our server also uses your IP address for a short time, in memory only, to limit spam and repeat hearts.
What stays in your browser
We don't set cookies. Your browser keeps a few things on your own device, in local storage: your language and light or dark setting, the notes you've hearted, the delete codes for your notes and replies, and whether you've closed a notice. Clearing your browser data removes them. We can't recover a lost delete code.
Services that help run the site
These companies help run the site. When you visit, your IP address and basic details about your device reach some of them, and each one handles that data under its own privacy policy.
- Cloudflare delivers and protects the site, and runs our visitor statistics. Cloudflare Web Analytics counts page views and page speed without cookies.
- netcup hosts our server.
- Supabase hosts our database, which holds the notes and the scrambled codes above.
- Google Fonts provides our fonts. Your browser downloads them directly from Google, so Google sees your IP address.
We don't run ads and we don't sell your data. If we add ads, we'll update this page first. Some of these companies may handle data outside your country.
Notes are public
Anyone can read notes and replies, find them through search engines like Google, and copy or save them. People and automated tools can do this. Deleting a note removes it from this site, but we can't remove copies made elsewhere, and search engines can take a while to catch up.
How long we keep things
Notes and replies stay up until they're deleted or removed. When a note is deleted, its scrambled codes, reports and replies are deleted with it. Notes hidden after reports can stay in our database so we can review them.
We keep encrypted copies of our database so the site can be restored after a failure. GitHub runs the nightly backup, and the copies are stored with Cloudflare. A deleted note can stay in a backup for up to 6 months, until that copy expires.
Your choices and rights
You can delete your own note or reply from the browser you used, or with the private link you got after posting. If you can't, or a note is about you, ask us to remove it.
We don't know who you are, so we can't look up notes by person. To help, we need the link to the note. Depending on where you live, you may have the right to access, correct or delete your personal data, to object to how it's used, and to complain to your data protection authority.
If you're in the UK or EEA: we use this data because it's needed to run the site and keep it safe, which is our legitimate interest, and to publish what you choose to post.
Children
What I Meant isn't for children under 13, and we don't knowingly collect their data. If you think a child under 13 has posted, send us the link to the note and we'll remove it.
Changes to this policy
If this policy changes, we'll update it here and change the date at the top.
Contact
What I Meant is run by Mohd Mahmodi. For privacy questions, message @mohdmahmodi on X.
If a translation of this page differs from the English version, the English version applies.