Privacy
What we store, and for how long
Account data until you delete it, sessions 14 or 90 days, logs 30 days, billing and commission records seven years, the anonymous verdict cache indefinitely.
Updated
The full table is in section 14 of the privacy policy. The parts people ask about:
| Data | Kept for |
|---|---|
| Account data (email, name, hashed password, verification status, role) and provider sign-in links | Until you delete the account; deletion completes within 30 days of a verified request |
| Website sessions | 14 days, or until sign-out or deletion |
| Extension tokens | 90 days, or until sign-out, uninstall or deletion |
| Email verification and password reset tokens | Until used or expired |
| Content sent for analysis (text, image URLs, fetched image files) | Not stored. Processed in memory; image files discarded after the provenance check. Request metadata may sit in logs for up to 30 days |
| Verdict cache | Indefinitely. Entries contain no personal identifier |
| Community reports | Until you delete the account |
| Daily usage counters | 30 days |
| Billing and purchase records | 7 years, for tax and accounting law |
| Creator applications and connected channels | Until you detach the channel or delete the account |
| Referral visit hashes | 13 months |
| Conversions, commissions, payouts | 7 years, for tax law, with your identity replaced by an opaque id after deletion |
| Request and error logs | 30 days |
| Support email | 2 years after the thread closes |
Backups are overwritten on a rolling schedule; deleted data leaves them within 90 days.
What is never collected
Precise location, biometrics, health data, government identifiers, browsing history, page URLs. Creators give identity documents, bank details and tax forms to Stripe directly; we never receive them.
Where it is
Our hosting is on Cloudflare in the United States, with processors that operate globally. Section 13 of the policy covers international transfers.
Was this helpful?