Privacy Policy

Welcome to sarahah.net, an anonymous messaging platform. This policy describes how we collect, store, and use information. By using the service you fully accept this policy.

When you sign in via Google OAuth we collect and store:

• Full name, email address, and profile picture provided by Google.
• The username you choose on the platform.
• Content of messages sent and received.
• Technical data: IP address, browser type, and visit time — for security purposes only.

Collected data is used exclusively to:

• Operate your account and provide the anonymous messaging service.
• Deliver messages between users.
• Detect abuse, prevent fraud, and enforce usage policies.
• Send necessary system notifications (email confirmation, security alerts).

We do not sell your data to third parties or use it for advertising.

Messages are delivered to the account holder without revealing the sender's identity. We retain an encrypted internal identifier to limit abuse; this identifier cannot be linked to a sender's identity under normal circumstances. In cases of serious threats or legitimate legal requests, it may be used in cooperation with the relevant authorities.

We use only essential session cookies to maintain your login state. We do not use tracking or advertising cookies. You can disable cookies in your browser settings, though this may affect service functionality.

Registration and login are supported exclusively through Google OAuth 2.0. By accepting the access permissions you authorise us to read your basic Google profile information. Google's privacy policy supplements this document: policies.google.com/privacy.

We retain your data for as long as your account is active. When you delete your account, your personal data is removed within 30 days. Some security logs may be retained longer for legal compliance.

You have the right to:

• Access the data we hold about you.
• Correct inaccurate information.
• Request deletion of your account and data.
• Object to processing of your data for certain purposes.

You can exercise these rights via our contact page.

The service is intended for individuals who are 18 years of age or older. We do not knowingly collect data from minors. If we discover an underage user, we will suspend their account and delete their data promptly.

We apply reasonable technical and organisational measures to protect your data from unauthorised access, loss, or disclosure. However, no internet-based system can guarantee absolute security; by using the service you accept this residual risk.

We may update this policy from time to time. We will notify you of significant changes via email or an on-platform notice. Continued use of the service after an update constitutes acceptance of the revised terms.

For any privacy-related enquiries please use our contact page.