Privacy Policy

Last updated: July 12, 2026

At Say4Real, we value your privacy just as much as we value your safety. This Privacy Policy outlines how we collect, use, and protect your information when you use our anonymous messaging platform.

1. Information We Collect

Account Information: When you sign up, we collect basic information such as your email address, name, and profile details to create and manage your link-in-bio page.

Messaging Data: When someone sends you an anonymous message, we collect the content of the message and metadata that protects our users and gives you context. This metadata includes approximate (city-level) location derived from IP, timezone, carrier/ISP and network (ASN), VPN and proxy detection, browser, operating system, device type, and fingerprinting signals such as screen size, fonts, and language. These act as "hints" — we never reveal a sender's exact identity, name, or email to you.

Notifications: If you enable push notifications, we store the browser push subscription needed to send them. We use your account email to send message and reply notifications, which you can turn off at any time.

Usage Data: We may collect anonymous analytical data on how our website is used to help improve the Say4Real experience.

Link and Visit Analytics (LinkBlip): When someone opens your Say4Real page or clicks one of your links, a paid creator can see it on the LinkBlip. We record the event with approximate, city-level location derived from IP (never GPS or precise location), device type, browser, and the referring site. We rely on our legitimate interest in giving creators audience insight; the data is coarse and is not used to identify individual visitors. We honor the Global Privacy Control (GPC) and Do-Not-Track browser signals — if either is set, we record nothing. Pro click data is kept for 7 days and Creator data for up to 1 year, after which it is deleted.

Payment Information: If you subscribe to Pro, your payment is handled by our third-party payment processor / reseller (Merchant of Record). They collect and process your payment details directly under their own privacy policy — we do not receive or store your full card number.

2. How We Use Your Information

We primarily use your data to operate the Say4Real service. This includes delivering messages to your dashboard, generating your personalized link page, and offering auto-generated story graphics based on activity.

Crucially, we also use metadata (like IP boundaries and device signatures) to enforce our Safety Policy. We employ this data alongside AI models to automatically flag, filter, and shadow-ban bad actors who attempt to use our platform for harassment.

3. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may strictly share data with trusted service providers (such as hosting partners or our AI moderation API providers) strictly to facilitate our service under confidentiality agreements.

We will also disclose information if required to do so by law or in the good faith belief that such action is necessary to comply with legal obligations or protect the rights and safety of Say4Real, its users, or the public.

4. Data Security

Message content and sender data are encrypted at rest (AES-256-GCM) under a separate encryption key for each account. Values required for safety matching (rate limiting, bans, thread grouping) are stored as one-way keyed hashes rather than raw identifiers. Our servers decrypt data as needed to operate the service — for example to run moderation, deliver notifications, and render your inbox.

5. Your Data Rights

You have full control over your profile and can permanently delete your account, and by extension your message inbox and personal data, at any time through your dashboard settings. Deleting your account destroys its encryption key, rendering the encrypted data permanently unrecoverable — including by Say4Real. Residual copies inside our encrypted database backups age out automatically within 30 days at most; after that, nothing remains anywhere.

6. Embedding

You can embed your public profile on other websites. When your profile is embedded, it loads inside an iframe on that site; a message sent from an embed is processed exactly like one sent on Say4Real, including the safety metadata described above. We use partitioned cookies scoped to the embedding site so a signed-in sender can be recognized without sharing your session across unrelated sites.

7. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact us at hello@say4real.com.