Privacy

whoi.im hosts personal homepages. This page says what we keep, why, and for how long.

What we store

Your sign-in email, to send one-time codes. It is never shown on your page.
Your page: the draft you save and each version you publish. Only the published version is public; hidden items and drafts never are.
Images you upload. We re-encode them and remove embedded metadata such as camera details and location. Originals are never served.
Reports about pages, including an optional contact address, which only moderators can see.
Security records: which account did which action and when (for example “published”), without page text, codes or image addresses.

One cookie keeps you signed in (on whoi.im only). There are no advertising or analytics trackers, and we don't record who visits your page.

Unpublish: the page stops being public immediately; your draft stays so you can publish again.
Delete: the page stops being public immediately; its drafts, published versions and images are then erased from our database and file storage, usually within minutes. Your address stays reserved and is not given to anyone else.
Backups may still contain deleted content for up to 35 days; if a backup is ever restored, deletions are re-applied before anything is served.
Images you uploaded but never used are removed after 30 days; abandoned uploads within about a day.
Sign-in codes expire after 10 minutes and are stored only in hashed form.

We can't remove copies other people or services already made of a public page (screenshots, caches, saved images).

You can edit, unpublish or delete your page at any time from your page. To report a page, use the report form.