Data Protection

Privacy Policy

Participation does not require an account. Public posts never expose a real name, email address, or device identity.

1. How Campus Anonymity Works

Your confessions and replies are 100% anonymous to students, classmates, and public visitors. Your real name, email address, and personal profile are never shown, linked, or publicly visible next to any confession or comment on confessit.lol.

Safety Governance & Legal Compliance

Other students never receive your real identity. Confessit uses a private server-side device record and a short-lived in-memory actor token only for abuse prevention, stable thread aliases, and lawful compliance. Authorized platform safety administrators may review private safety records only for reported abuse, platform-safety investigations, or valid lawful requests under applicable law.

Responsible campus anonymity is fully protected. Unlawful harassment, threats, and impersonation are strictly prohibited.

2. Information We Retain

For anonymous participation, Confessit retains a protected server-side device record and short-lived signed actor-token metadata used for abuse prevention. The token stays in browser memory and is not written as a Confessit cookie, localStorage, or IndexedDB credential.
Campus affiliation data (which college community you join)
Cryptographic thread-scoped alias salts (preventing cross-thread student tracking)
Traffic metrics: page path, country code, referrer, and one-way hashed visitor/session identifiers
Network data tied to each confession and reply you post — IP address and user agent, held for 180 days, kept apart from the confession itself and used only for abuse prevention and lawful requests

3. Our Privacy Commitments

🚫 We never sell, rent, or commercialize your personal data.
🚫 We never share identity information with other students or campus peers.
🚫 We do not run third-party advertising tracking networks.

4. Payments, Supporters and Cookies

If you contribute, we store the name you give us, your email address, an optional phone number, the amount and currency, your message if you wrote one, the invoice number, the timestamp, and the payment partner's own reference for the transaction. We use them for your receipt, for refunds and chargebacks, and for the accounting records we are required to keep. Card and UPI details never reach our servers — the payment partner handles them.
A contribution is published only as far as you ask. The Wall of Supporters always lists the amount. Your name and your message appear beside it only if you tick “Show my name and message on the public Wall of Supporters”, which is unticked by default; leave it unticked and your contribution is listed as an anonymous supporter forever. Your name and email are on your receipt and in our accounting record either way, because a receipt has to say who paid. No contributor's receipt is ever linked from the Wall, and you can ask us to hide a listing you later regret by writing to privacy@confessit.lol.
Cookies we set. A country choice for the feed (confessit_country), a currency and region choice (confessit_region), an interface language (confessit_locale), and — only if you sign in — the session cookie (authjs.session-token). The anonymous participation token is not a cookie.
Analytics, and where it is not loaded at all. We measure aggregate usage — which pages are read, how long a page takes to load — to decide what to build next. Where that measurement runs, Google Analytics sets its own cookies (_ga and _ga_<property>, up to two years) and receives the page address you visited. In the European Economic Area, the United Kingdom and Switzerland we do not load the analytics script at all, so no analytics cookie is created and there is nothing for you to consent to; the same is true everywhere we cannot tell which country a request came from. It never runs on your account pages, the notification centre, the operator dashboards, or a contribution receipt.
Country for the currency you are quoted and for the feed's country scope is read from the network request (our CDN and host add the country header). We do not store your IP address for that purpose; the IP retention described above is for posted content and abuse prevention only.
Who processes it. Cloudflare (network and email routing), Vercel (hosting), Dodo Payments (payments), Google Analytics (aggregate page measurement, only outside the EEA, the UK and Switzerland — see the analytics note above) and our own database. Dodo is the merchant of record on a card or wallet payment, which makes it the seller of record on the payment invoice and the controller for the tax and payment-regulation data it must keep. Otherwise these parties handle data on our instructions.
Your requests. Write to privacy@confessit.lol for access, correction or deletion, or for a refund or invoice copy. Formal grievances follow the process on the grievance page.