Last updated: September 23, 2026.
Privacy
TP Social is built to hold as little of you as possible. Publication is cryptographically signed at the source, which means the registry doesn't need to vouch for who you are beyond mapping a handle to a public key. Here is what we actually keep, why, and for how long.
What we collect
- Account email and name. Required to log in, to send security and account notices, and to be a point of contact for handle disputes.
-
Your handle's public key. Required for
resolving
@youacross clients. This is public data by design. - Signed page bundles. The CBOR wire and Ed25519 signature for each page you publish. This is public data by design.
- Session metadata. IP address, user-agent, and last-activity timestamp on the rows in our sessions table, used to power "log out from another device" and to detect abuse.
-
Optional desktop telemetry. If you opt
in inside the desktop client, we receive
{event, version, channel}. We do not keep IP addresses past a single country-lookup at ingest time (see /telemetry for details).
What we don't collect
- Your signing seed. The desktop client holds it. We never see it.
- Reading behaviour. We do not track which public pages you read.
- Advertising identifiers. There are no ad networks on the registry.
Cookies and storage
We set a session cookie when you sign in. It identifies your session row in our database and is removed when you log out or when the session expires. There are no third-party cookies.
Your rights
You can update your email and name at Settings → Profile, list and revoke active sessions at Settings → Sessions, export your account data at Settings → Export, and delete the account entirely from the profile page. Page bundles you've published are already public; deleting your account removes the registry's copies of them.
Contact
Privacy questions: hello@tpsocial.net.