Privacy
Last updated: September 21, 2026
No accounts, no ads, and we don't sell your data. Your note is public on purpose. Everything else on this page is here to run the wall, count views, keep bots out, take payments, or show us how the wall is used.
Your note is public
What you post is public: your words, the name you sign with (any name, or none), your stickers and paper color, when it went up, and on a Gold note its number and who it is for. It's on the wall, on the note's own page, in the list of every note and in its share pictures, and it stays in the archive after the wall closes. Search engines can find it there and show it in their results, and may keep a copy for a while after a note comes down. So keep private information out of it.
Keeping bots out
When you post a note or start a Gold checkout, we store a salted hash of your IP address (not the address itself) with the time, to cap how often one connection does it: 5 notes an hour, 10 checkouts a minute. It's kept apart from the notes and nothing on the wall shows it. Old records stay until we clear them, and a post our bot trap catches leaves the same hash in the server's logs.
Cloudflare Turnstile checks that a person, not a bot, is posting. It loads the first time you touch the form, and Cloudflare sees your IP address and signals from your browser to do its check; we send it your IP address once more when we verify the answer. (Cloudflare's privacy policy)
Counting views
Opening someone else's note, on the wall or on its own page, counts as a view of it, once a day. To tell a repeat view from a new one, we store a salted hash of your IP address mixed with that note and that day (not the address itself), apart from the notes. It's used for nothing else, and older ones are deleted as new views come in. A note shows how many views it has once it reaches 50; below that, the number stays on our server. Your own notes (the ones this browser posted), the page you land on right after paying, browsers that say a script is running them, and search engines' crawlers aren't counted.
Analytics
We use PostHog (its US cloud) to count visits and a few actions: posting a note, opening one, sharing one, switching between the wall and the list, and the steps of buying a Gold note or making yours gold. That tells us what people use and where they give up; we use it for nothing else. The events carry counts, like how long a note is, never its words. Opening a note on the wall, sharing one, buying one or being offered Gold for one you posted sends that note's id, and a note's own page has its id in the address, so PostHog can tie a visit to the notes it posted, viewed, shared or bought. Opening a note on the wall also sends whether it's one you posted from this browser. Until 00:00 UTC on November 6, 2026, a browser on a screen narrower than 700 pixels (most phones) is also picked for one of two versions of the home page, the wall or a list, and its events say which, so we can see which one works better. No session recordings, no ad tracking.
PostHog keeps a random ID in a cookie and in your browser's storage, so a return visit counts as the same visitor, and it receives your IP address with each event, which it can use for a rough location. A content blocker that stops PostHog stops all of this counting, and the wall works the same: a phone still gets the version it was picked for, it just isn't counted. (PostHog's privacy policy)
Payments
Stripe runs the Gold checkout on its own page. Your card number goes to Stripe and never reaches us. Stripe shows us what any shop sees: the email and name you give it, your billing country, and your card's brand and last four digits. We look them up in Stripe when you ask for a refund, and we don't copy them into our database.
Your note travels with the order so it can go up once you pay (to make a note gold later, only its id does). From Stripe we keep the order's ids (the checkout and the payment) and what it cost: that is how we match a note to its payment and refund it. A record of those stays after a note comes down or loses its gold, so the same payment can never count twice. If a paid note can't go up, we refund it, usually right away, and keep it privately with its payment and the refund's id. (Stripe's privacy policy)
On your device
The wall keeps up to three things in your browser. None of them is sent to us, with these exceptions: in analytics, a yes or no when you open a note (whether it's one you posted from this browser) and which version of the home page this browser was picked for; and a note's secret key, when you use it to make that note gold.
- While you pay for a Gold note, the note you wrote waits in that tab (sessionStorage,
dw:draft:v1), so it's still there if you come back from the checkout. It goes once your note is up, and the tab forgets it when you close it. - The notes you post from this browser, by id and time, 50 at most (localStorage,
dw:mine:v1), so the wall can tell you which ones are yours. For a free note it also keeps the secret key that lets you make it gold. The key goes to us only when you tap to make that note gold, to show the note is yours, and we keep only a hash of it, never the key itself. It all stays until you clear this site's data. - On a screen narrower than 700 pixels, which version of the home page this browser was picked for while we test them, the wall or a list (localStorage,
dw:ab:phone-list), so it gets the same one on every visit until 00:00 UTC on November 6, 2026. Nothing else is in it, and it stays until you clear this site's data.
If you pick MAYBE LATER, the wall shows you the note's private link, /n/<id>#k=…, with the key in it, so you can make the note gold later from any browser; opening the link keeps the key in that browser too. Browsers never send the part after the # to a server, and the note's page takes it out of the address before anything is sent to PostHog.
Plus PostHog's ID, above.
Who else handles it
- Vercel hosts the site and runs its server code. Like any host, it sees your IP address when your browser asks for a page. (Vercel's privacy policy)
- Supabase holds the database: the notes and how many views each has, the hashed IP records, the payment ids and amounts, and a hash of each secret key. The wall's live updates connect your browser to Supabase directly, so it sees your IP address too. (Supabase's privacy policy)
- Stripe, Cloudflare and PostHog, as above.
- When a note goes up or is made Gold, whoever runs the site gets a short summary of it on WhatsApp, sent through CallMeBot: its words and the name it's signed with, and for a Gold note who it's for and its link. All of it is public already.
Taking something down
To have a note taken down, or to ask what we hold and have it deleted, email brunofay1@hotmail.com with the note's link. There are no accounts, so a note's link, or the email address you paid with, is how we find what's yours. For a Gold note, Refunds in the Terms says what happens to the money.
We delete what we can find: the note, and the hashed records too if you tell us your IP address. Some copies stay where they are: what Stripe keeps about a payment (the order and the note it carried) and our record of its ids and what it cost; analytics records, which PostHog keeps under a random ID, not your name; and the WhatsApp summary sent when the note went up or was made Gold.
Children
The wall isn't meant for children under 13.
Changes
If this page changes, the date at the top changes with it. The rules for posting and paying are in the Terms.