Privacy Policy

Who we are

Bawdcast is an 18+ photo and video community at bawdcast.com. Privacy questions: [email protected].

What we collect

• Account: username, optional email, password hash, plan, NSFW and DM preferences
• Content: photos and video you upload, captions, comments, chats, polls, and wall profiles
• Interactions: likes, dislikes, follows, saves, reports, invites, and dwell time used for discovery
• Technical: IP address, browser / device type, a simple device fingerprint for abuse prevention
• Product analytics: first-party events (page views, impressions, likes) stored on our API — no ad-network trackers
• Notifications: web-push subscription if you enable it in Settings

Messages

Direct messages, groups, and rooms are encrypted in transit (HTTPS) and stored encrypted at rest. We decrypt on our servers so you can sync across devices and receive notifications. This is not device-to-device end-to-end encryption (the kind that would block recovery if you lose your phone).

How we use it

To run the feed and discovery, personalize what you see, prevent abuse, send transactional mail (password reset), and improve the product. We do not sell your personal data.

Processors

We host on Cloudflare (Workers, D1, R2, Turnstile, Pages). Password-reset mail may go through Resend. Invite SMS, if enabled, may go through Twilio. We do not sell your photos.

Cookies and local storage

We use an httpOnly session cookie for login. Guests who pass the captcha get a short-lived human-verification cookie (and a backup token in the browser on Safari). Age-gate preference and a session analytics id also live in your browser. These are needed to run the service. Web push is off until you turn it on.

Your rights

You can delete your account in-app under Settings → Delete account (password required). That disables the account, removes your posts from the feed, and tombstones your username. You may also request a data export or deletion by emailing [email protected].

Retention

We keep account data while the account is active. After deletion, profile fields are replaced with a tombstone. Posts marked removed, including child-safety holds, may stay in backups and object storage for a limited period for security and legal review. Abuse logs are kept longer than ordinary analytics.

Children

Bawdcast is not for anyone under 18. We do not knowingly collect data from children. If you believe a minor has an account or appears in a post, use Report → Involves a minor or email [email protected].