Privacy

What we collect

Only what you type into a form: your email, and if you choose, your name, a link and a message. We also count page views per page and day, with no cookies and no IP address stored. Accounts work differently. See "My desk" below.

Ideas you send

If you use the idea box, we keep your text, your image if you add one, and your email if you give it. Your words, image and email stay private. The public idea list shows only an ID, the date, a short summary written by our AI, the decision and the reason. To stop spam, we keep a one-way code of your connection for one day only.

Students and anyone under 16: you can send ideas without an email. If you want to add one, ask a parent first.

While you type, the idea box may suggest a corrected, shorter version of your text. To make it, your text (not your email) is sent to LanguageTool, a grammar checker. We do not store that check; you choose whether to use the suggestion.

The Ideas page shows how many people are watching right now. To count you, your browser tab keeps a random code (not a cookie) that disappears when you close the tab, and sends it every 30 seconds while the page is open. We do not store your IP address with it. The code is deleted from our server after 30 minutes; after that we keep only the totals.

If you tick "Keep it private" when you send an idea, the public list shows only "Private idea" and its status, never a summary of it.

On My desk you type your email and we email you a link that works for 24 hours. If that email has not sent ideas yet, the link creates your free account. When you open the link, that device stays signed in for 90 days with one cookie ("izs"): it holds only a signed code for your email, cannot be read by the page, is sent only to our own server and is deleted when you sign out. "Sign out everywhere" ends it on every device. If you add a passkey, your device keeps the private key and checks your face, fingerprint or PIN itself; we store only the public key, the date and the device type (for example "Windows · Chrome"), so we never see your face or fingerprint. You can remove a passkey any time. You can also set a password: we keep only a one-way scrambled form of it (a hash), never the password itself. If you turn on two-step verification, we keep the key of your authenticator app encrypted on our server, and only one-way codes of your backup codes; the QR code for the app is drawn in your own browser. After every change to your password or two-step verification, we email you a short notice with the time and the device type. When you accept the User Agreement, we record its version, the date and time, and your IP address. For each sign-in, and each failed try, we record the date and time, your IP address, your device type and how you signed in. You can see the latest ones under "Activity" on My desk. We keep these records while your account exists and for 12 months after it is closed. If you choose a public name there, it is shown as "by …" next to your ideas on the public list (never on private ideas). You can change or remove it any time.

Why

To reply to your request and, if you ticked the box, to send you emails about that topic. For ideas: to send you a receipt and a reply about that idea.

Who handles it

Our web host stores the form data. We send email through an email service provider. LanguageTool checks the grammar of idea text when the box suggests a shorter version. We do not sell your details.

Your choices

Every email has an unsubscribe link. To see, correct or delete your details, write to [email protected].

Last updated 29 Oct 2026.