01 The Basics: How SecretMsg Works
SecretMsg allows users to receive questions and messages through social media and direct links:
-
Account Users: Users create a personalized link (such as
secretmsg.net/yourname) and share it on Instagram Stories, WhatsApp, TikTok, X, or other channels to invite questions from anyone who has access to the link. - Message Senders: When a person clicks the link, they visit a page where they can submit an anonymous message or question directly to the Account User without creating an account or logging in.
- Public or Private Replies: The Account User has the choice to publish their answers publicly (to their board, threads, or social media stories) or reply privately to the sender via a secure one-time link.
- Sender Anonymity: SecretMsg does not store the name or social media handles of the Message Sender and cannot reveal this identity to the Account User or anyone else.
- Optional Sender Clues: If permitted by the sender, SecretMsg may share high-level non-identifying hints (such as broad device type or approximate geographic region) with the Account User.
02 Personal Information We Collect
We collect information depending on how you interact with our platform:
A. Information You Provide to Us
- Account Information: When you register a board, you provide a username/slug, display name, and password or email address used strictly to authenticate your login.
- Questions & Messages: Text and prompt answers submitted to Account Users through our composer.
- Feedback & Support Correspondence: Information you submit when contacting our support or trust & safety team.
B. Automatically Collected Information
- Device & Connection Data: Operating system, browser type, general location (such as city or region for non-identifying sender hints if enabled), and security verification tokens.
- Local Storage Technologies: We use modern browser local storage (HTML5) to remember your preferences (such as Dark or Light theme mode, local drafts, and active board credentials) directly on your device.
03 What We Will NEVER Do
🚫 We never sell, rent, license, or monetize your personal information, messages, or emails to advertisers or third-party data brokers.
🚫 We never disclose the sender's identity to the recipient.
🚫 We never use retargeting pixels, invasive tracking beacons, or cross-site advertising trackers.
04 How We Use Your Information
- Providing the Services: To deliver messages, maintain private inboxes, publish public Q&A threads, and generate story sticker cards.
- Platform Safety & Moderation: To investigate, detect, and block abusive, harassing, hateful, or illegal messages and protect community members.
- Customer Support: To answer your questions, resolve account issues, and respond to safety inquiries.
- Legal Compliance: To comply with legal obligations, enforce our terms, and cooperate with law enforcement when required by law.
05 Automated Safety & Content Moderation
To protect user safety, SecretMsg utilizes automated content moderation filters and algorithms designed to screen incoming messages. These filters detect and block harmful language, cyberbullying, predatory behavior, threats, and illegal material before it reaches recipients' inboxes. Recipients also retain full authority to report or block any message with a single tap.
06 How Information Is Shared
Public Social Sharing by Users: When an Account User chooses to post a response publicly, the question text and their answer become visible on their public Q&A thread and wherever they share it on social media.
Trusted Service Providers: We work with essential service providers who assist in operating our platform, including secure server hosting, database storage, and transactional email verification. These providers are bound by strict confidentiality and data protection standards.
Compliance & Safety: We may disclose information if we believe in good faith that such action is necessary to comply with legal requests, prevent physical harm or financial loss, or protect the safety and integrity of our users.
07 Your Rights & Choices (GDPR & CCPA)
Regardless of your location, you have strong rights regarding your personal information:
- Access & Portability: You may request details about the data associated with your account.
- Correction: You can update your display name and password directly from your dashboard settings.
- Instant Complete Erasure: You have the right to permanently delete your data at any time.
lock_reset Self-Service 1-Tap Account Wipeout
Open Settings → Delete Account at any time. When confirmed, our systems immediately and permanently wipe your account, custom handle, email address, and all received messages forever. This deletion is permanent and cannot be reversed.
08 Do Not Track Signals
Because we do not track our users across third-party websites or serve targeted behavioral advertising, our privacy practices remain consistent whether or not your browser transmits a "Do Not Track" signal.
09 Children's Privacy
Our Services are not directed to children under 13 years of age (or the minimum legal age in your jurisdiction). We do not knowingly collect personal information from children. If we learn that personal information has been collected from a child under 13 without verified parental consent, we will promptly delete that information. Parents or guardians may contact us at safety@secretmsg.net.
10 Data Retention & Security Practices
We retain your information only for as long as necessary to fulfill the purposes outlined in this policy or until you request deletion. We implement reasonable technical, administrative, and physical safeguards designed to protect personal data against unauthorized access, loss, alteration, or misuse.
11 Inquiries & Data Protection Contact
If you have questions regarding this Privacy Policy, our data practices, or wish to exercise your legal privacy rights, contact us at: