Privacy
Version 2026-09-27
- No accounts and no ad pixels.
- We count visits, shares and similar actions as daily totals, and use Google Analytics to see how the site is used. In the EU, UK and Switzerland it sets no cookies.
- Your note is public. Everything else we keep is as little as we can.
- We never see your card number and never store your raw IP address.
What we store and why
| Data | Why | How long |
|---|---|---|
| Note text, optional signature, optional link, paper color, number and timestamps | To show your note | Public while NeverDies operates, and in the public archive |
| A one-way hash of your IP address (salted and truncated) | Rate limits, stopping abuse, counting reports and likes once per person | With the note, report or like it belongs to |
| Your email, only if you give it | Telling you about your note's status | Until you ask us to delete it. The note stays. |
| Moderation votes, decisions and the original of hidden notes | Accountability, appeals and legal requests | With the note |
| Payment reference from Stripe | Refunds, disputes and accounting | As long as accounting law requires |
| From Stripe, for paid notes: the email you paid with, your card's country, and a card fingerprint (an ID Stripe derives from the card; it cannot be turned back into the card number) | Recognizing someone who keeps posting notes that break the rules, and blocking them. Only moderators see it; it is never shown publicly | With the note it belongs to; on the blocklist only while a block is in place |
| Messages you send through the contact form, with your email | Answering you | In our email inbox, until the conversation is over. We don't keep them on the site |
| A list of your recent submission IDs, in your browser's local storage | Showing you your note's status on this device | On your device, until you clear it |
Our legal bases are performing our contract with you (showing your note, payments and refunds), our legitimate interest in keeping the wall safe (IP hashes, reports and moderation records) and in understanding how the site is used (analytics), your consent (your optional email) and legal obligations (accounting and law-enforcement requests).
Who else handles it
- Stripe processes payments. Stripe collects your payment details and email at checkout under its own privacy policy.
- Resend sends the emails about your note, if you gave us an address, and delivers contact form messages to our inbox.
- Cloudflare hosts the site, the database and the network, and runs a bot check (Turnstile) when you submit a note or a contact message.
- Google Analytics measures how people use the site: pages viewed, actions like opening the composer or sharing, device type and rough location. It sees your IP address but doesn't store it. Outside the EU, UK and Switzerland it sets first-party cookies (
_ga, kept up to 2 years) to recognize a returning browser. In the EU, UK and Switzerland it sets no cookies and can't recognize you from one visit to the next. Advertising features and Google signals are turned off. Data is kept for 14 months. - Anthropic and OpenAI receive the note text, signature and link so their AI models can review them. They receive nothing else about you.
These services may process data outside your country, including in the United States, under their standard data protection terms. We don't sell your data or share it for advertising.
Cookies
The only cookies are Google Analytics' _ga cookies, and only outside the EU, UK and Switzerland. You can block or delete them in your browser, or install Google's opt-out add-on. The site works the same either way.
Your rights
You can ask to access, correct or delete the personal data we hold about you, or object to how we use it. Email legal@neverdies.app. We reply within a month.
Personal data in a note. Notes are permanent, but your right to erase personal data comes first. If a note contains your personal data, whether you wrote it or someone else did, we hide the signature or the whole note. Its number stays as a blank tombstone. A copy in an older public archive snapshot may still exist, and we remove it from new snapshots.
If you're in the EU or UK, you can also complain to your data protection authority.
Children
NeverDies is not for anyone under 16. The wall itself is public and readable by anyone.
Changes
If we change this notice, we update the version date at the top and show material changes on the site.