Anon Postal Privacy Policy

Overview

Anon Postal ("the Application") lets you publish posts anonymously with no account, or sign in with Google for a private workspace. This policy explains what data each path involves, where it's stored, and what happens to it over time.

Anonymous posting

Publishing a post without signing in requires nothing from you beyond the post itself: a title and body text. No account, cookie-based identity, IP address, or device information is stored alongside an anonymous post. Anonymous posts are always public and always expire exactly 24 hours after creation, regardless of any option shown in the interface.

What signing in stores

Signing in uses Google as the identity provider (via NextAuth). Doing so creates an account record containing:

• Basic Google profile — your name, email address, and profile photo, as provided by Google.
• Authentication tokens — the OAuth tokens NextAuth uses to keep you signed in, stored server-side and never exposed to other users.

This data exists only to authenticate you and to let private or later-edited posts be tied back to your account. Anon Postal does not request any Google data beyond the basic profile needed to sign you in.

What posts store

Every post — anonymous or signed-in — stores its title, body text, whether it's public or private, and its expiry timestamp. Posts created while signed in are additionally linked to your account internally, so you can find, edit, and delete them later.

Who can see what

• Public posts are visible to anyone who has the link or browses the public dashboard, signed in or not.
• Private posts are visible only to the signed-in account that created them.
• Authorship is never shown to other viewers. Even for a signed-in user's public post, the app only ever tells a viewer whether a post is their own — it does not reveal whose post it is otherwise, to any other user.

Expiry and deletion

Every post has either a fixed expiry timestamp or none (if a signed-in user chose "Never"). Once a post's expiry timestamp passes, it is immediately excluded from every listing and direct link, and is then permanently deleted from the database by a recurring, server-only cleanup job — not just hidden.

Signed-in users can delete their own posts at any time, which removes them from the database immediately and permanently. Anonymous posts cannot be deleted manually, since they have no owning account to authenticate the request against — they are removed automatically at their fixed 24-hour expiry.

Where data lives

Post and account data is stored in a Postgres database hosted on Supabase. No content is stored anywhere else.

Third parties

The only third-party service involved is Google, used solely for sign-in (OAuth). Anon Postal does not use analytics, tracking, or advertising of any kind.

Payments

Anon Postal has no payment or billing functionality.

Your rights

If you've signed in with Google, you can delete any of your own posts at any time from your dashboard. To request removal of your account data entirely, contact us via the link below.

Changes to this policy

If Anon Postal's data practices change, this policy will be updated first, and the version and effective date above will change accordingly.

Contact

Questions about this policy can be sent through the contact page.