Inkognito

Legal

Privacy Policy

Our Approach

Inkognito is built for anonymity. We collect the minimum data necessary to run the platform and prevent abuse. We do not sell your data. We do not collect your name or email.

What We Collect

  • —
    Session UUID: Generated in your browser, stored in localStorage. Used to associate your posts and reactions. Not linked to your identity.
  • —
    Approximate location: Country and city derived from your IP address via ipapi.co. Used to show location on confessions (e.g., 'Anon · Lagos, NG'). We do not store your full IP address.
  • —
    Device fingerprint (coarse): A hashed combination of your browser platform, language, and screen size. Used only for abuse detection and rate limiting.
  • —
    Content you post: Confessions, comments, and reactions. These are stored anonymously linked to your session UUID.

What We Do NOT Collect

  • ✕Name or username (unless you optionally create one)
  • ✕Email address
  • ✕Phone number
  • ✕Full IP address (only country/city via third-party lookup)
  • ✕Video or audio from chat sessions (peer-to-peer, we never see it)
  • ✕AI companion messages (session-only, never stored in our database)

Third-Party Services

  • —
    Convex: Database and real-time backend. Data stored in the US.
  • —
    Groq: AI companion inference. Messages sent to Groq for processing (not stored by us).
  • —
    ipapi.co: IP-to-location lookup. Your IP is sent to ipapi.co momentarily to determine country/city.
  • —
    Google AdSense: Advertising. Google may set cookies and collect data per their privacy policy.
  • —
    AWS Rekognition: Image moderation. Uploaded images may be sent to AWS for content analysis.

Cookies

We use localStorage (not traditional cookies) to store your session UUID and age confirmation. Google AdSense may set cookies for ad personalization. You can opt out of ad personalization via Google's ad settings.

Data Retention

Confessions and comments are retained indefinitely unless removed by moderation or your request. Session UUIDs persist until you clear your browser's localStorage. There is no account deletion flow currently — contact us to request data removal.

Your Rights (NDPR / GDPR)

You have the right to: access data associated with your session UUID, request deletion of your content, and opt out of location collection (simply block the ipapi.co request in your browser). Contact us at privacy@inkognito.app.

Children

Inkognito is strictly for users 18 and older. We do not knowingly collect data from minors. If you believe a minor has accessed the platform, contact us immediately.

Last updated: May 2026 · privacy@inkognito.app