Cookie Policy

Cookies are small text files placed on your device by websites you visit. We also use related browser storage (localStorage, sessionStorage, IndexedDB) for the same purposes. For simplicity, this Policy refers to all of them as "cookies".

Strictly necessary (always on). Required to operate the Service: authentication session tokens, CSRF protection, language and theme preference, and a small in-browser cache of your one-to-one end-to-end-encrypted message keys. Without these the Service cannot function, so they do not require consent under GDPR/ePrivacy.

Functional (opt-in outside the U.S.). Remember UI choices such as your last-used composer tab, NSFW media reveal preference, and which feed sort you prefer.

Analytics & performance (opt-in outside the U.S.). Aggregate, IP-truncated usage signals that help us measure performance and crashes. We do not use third-party advertising trackers.

Embedded third-party content. When you view embeds from YouTube, Vimeo, Twitch, Spotify, or similar providers, those providers set their own cookies inside the embed frame. Their cookies are governed by their policies, not ours.

We do not use cross-site advertising cookies, fingerprinting, or third-party tracking pixels.

EU, UK, Brazil, and California residents see a consent banner on first visit and can change choices at any time from Settings → Privacy → Cookie preferences. You can also block or delete cookies in your browser settings; doing so may break features such as staying signed in or decrypting your own private messages.

We honor the Global Privacy Control (GPC) signal as a valid opt-out under CCPA/CPRA. Because we do not sell or share personal information for cross-context behavioral advertising and we do not use third-party trackers, no further action is taken on GPC beyond what is described here.

We may update this Policy. Material changes will be announced in-app at least 14 days before they take effect.

Questions: privacy@joinyourspace.org