Privacy Policy
Last updated: April 21, 2026
Who we are
WhispHub is operated by Emilie PERETTI, an independent developer based in France. For any question, you can reach out via the contact form.
What data we collect
Beyond the obvious account and content you provide yourself, a few things are worth flagging:
- Passwords are hashed with Argon2id — we never see them in clear, not even the admin.
- Activity log : we record lightweight timestamps of your actions (called "pulses") to build your contribution graph. No detailed tracking, no clicks, no mouse movements.
- Support requests : if you message us via the contact form, we store a hashed version of your IP for 90 days as an anti-spam measure (we can't reverse it to find you).
What we don't collect
- No analytics trackers (no Google Analytics, no Mixpanel).
- No advertising cookies.
- No third-party scripts that fingerprint you.
- No data sold, ever.
Where your data lives
Your data is stored on servers located in the European Union. We use standard third-party email providers to deliver transactional emails (password resets, notifications) — these providers only receive what's needed to deliver the message.
How long we keep your data
As long as your account exists. If you delete your account, everything is wiped immediately and permanently — no backup restore, no grace period. Support request logs are kept for 90 days.
Your rights (GDPR)
Under the European GDPR, you have the right to:
- Access : download all your data as JSON from your Settings page.
- Rectification : edit your profile, bio, photo and published content at any time from your account.
- Erasure : delete your account permanently from your Settings page. This is instant and irreversible.
- Objection : contact us via the contact form.
Cookies
WhispHub uses a single technical cookie (authentication token stored in localStorage) to keep you signed in. No tracking cookies. No consent banner because there's nothing to consent to beyond the technical session.
Children
WhispHub is not intended for users under 15. If you are a parent and believe your child has created an account, please contact us.
Changes
If this policy changes substantially, we'll notify active users by email at least 14 days in advance.