Privacy

Last updated 25 August 2026. This policy covers proposal.pw and the other sites we run on the same service.

What we store about you as an account holder

• Your email address, so you can log back in.
• Your username, which is public by design because it is your link.
• If you log in with Google, the account identifier Google returns to us, plus your name and profile image if Google provides them.
• A session cookie so you stay logged in. We set no advertising cookies.

What we store about people who send messages

We never store a sender’s name, email address or raw IP address, and we never show a sender’s identity to the inbox owner, on any tier, at any price.

• The message text, and the time it was sent.
• A one-way hash derived from the sender’s IP address, combined with a secret we hold and scoped to the receiving inbox. We use it only to apply rate limits and to honour blocks. It is not an IP address and is useless to anyone who obtains the table without our secret. Being straight with you about the limit of that: because we hold the secret, if we were given a specific IP address we could test whether it matches a stored hash. We do not do this, and would only do so if we were legally compelled to.
• A two-letter country code, where our hosting provider supplies one.
• When anyone opens a link we record the visit with a hashed visitor pseudonym, a rough device class (mobile or desktop) and a country code, so owners can see how many people viewed their link. Never a raw IP address, and never who you are.

We do not store raw IP addresses of message senders in our database. Our hosting and infrastructure providers keep their own transient request logs, which we do not control and do not use to identify senders.

What we never do

• Sell or rent your data.
• Show you who sent a message, on any tier, at any price.
• Email you marketing you did not ask for.

Deleting things

Deleting a message removes it from our database. Blocking a sender removes every message that sender has sent you. To delete your entire account and everything in it, email us and we will action it.

One thing that survives deletion: an anonymous record that a message was sent at a given time, holding the sender hash and no content. We keep it so that deleting a message cannot be used to reset an abusive sender’s rate limit. It contains nothing you wrote and nothing you received.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete the personal data we hold about you, and to complain to your local data protection authority. Contact us to exercise any of these.

Children

This service is not intended for anyone under 13, and we do not knowingly keep accounts for them.

Contact

Email privacy@proposal.pw for anything in this policy, including data deletion requests.