Welcome to the Stigmi privacy policy!

This document will go over what Stigmi collects and what it does with it, and also, your rights with that collected data.

The gist is: Stigmi collects the account information and content you provide, plus some technical information needed for sign-in and security. Signup and login use Cloudflare Turnstile, verification emails are sent through Resend, and the Sessions page uses an IP geolocation service to show approximate locations. If you choose to transcribe a Voice Stig, its recording is sent to Cloudflare Workers AI.

While Stigmi does its best to uphold the privacy practices outlined in this policy, please keep in mind that third-party scrapers and data collectors cannot always be prevented from copying or preserving publicly accessible content, so please avoid posting anything you wouldn't want to remain on the internet forever. After all, what goes up never comes down.

1. What is collected. Your username, email address and verification status, display name, password (stored as a hash), bio, optional location and time zone fields, website links, avatar image, Stigs and replies (including Voice Stig recordings and any generated subtitles), follows, Favorites, and Restigs. For signed-in sessions, Stigmi also stores your IP address, browser and operating system names derived from your browser's user-agent, and session creation and last-accessed times.
2. Email verification. An email address is required to use an account. Stigmi sends your address, username, and a verification code to Resend to deliver the verification email. Your address is not shown on your public profile.
3. Cookies and analytics. Stigmi sets a session cookie so you stay logged in. Cloudflare Web Analytics may inject a beacon script on Stigmi pages where it is enabled. See Cloudflare Web Analytics and Cloudflare's privacy policy.
4. Signup and login verification. Signup and login forms load Cloudflare Turnstile to help prevent automated attempts. To verify a completed challenge, Stigmi sends Cloudflare the response token and your IP address. Cloudflare's handling of this data is covered by Cloudflare's privacy policy.
5. Session locations. When you open the Sessions page, Stigmi sends each session's public IP address to ipwho.is to look up an approximate city, region, and country. Stigmi caches lookup results in server memory for 24 hours. These locations can be inaccurate; they are shown to you with your sessions and are separate from any location you choose to put on your profile or Stigs. See the provider's privacy policy.
6. Storage. The database is local and on the same machine running Stigmi itself. Any media, either Stigs or profile pictures, are also stored locally, and sanitized (i.e., EXIF location data, device info, audio metadata) during upload.
7. Voice Stig transcription. The "Transcribe this Voice Stig" checkbox is off by default. If you select it, Stigmi sends the recording to Cloudflare Workers AI after posting to generate timed subtitles, then stores the returned subtitle text and timestamps with your Stig. This transfer happens even if you limit who can view your Stigs. If you leave the box unchecked, Stigmi does not send the recording to Workers AI for transcription. See Cloudflare's Workers AI data usage information and privacy policy.
8. Publicity. Your username, display name, bio, location, time zone, links, avatar, and Stigs are public to anyone by default. Your selected time zone is available through the API even if you hide the UTC offset beside your profile time. You can restrict who can see your Stigs to logged-in users or followers, and who can see Stigs you have favorited. These can be changed here.
9. Third-party services. Stigmi shares signup and login verification data with Cloudflare, verification email details with Resend, and session IP addresses with ipwho.is as described above. Cloudflare also provides analytics for the domain and processes recordings sent for optional Voice Stig transcription.
10. Right to Deletion and Export. You can export all your data, delete any individual Stig, or your entire account yourself at any time. Past profile pictures are not stored - when you change it, the old one is deleted. Any media attached to Stigs is also immediately deleted with the parent Stig.
11. Retention. When you delete an individual Stig or your profile picture, it's removed immediately, as noted above. Deleting your account removes its profile information, Stigs, media, follows, and favorites from the live database. Records of other signed-in sessions may remain in the session store after account deletion. Data already sent to third-party services is subject to their own retention policies.
12. Backups. Backups are taken daily between 12:00 PM and 4:00 PM UTC and retained for 7 days. Data deleted from the live site may remain in a backup until that backup is removed.

Back to Stigmi