Privacy Policy

Privacy Policy

Last updated: September 19, 2026

postTXT (“we”, “us”, or “our”) operates the text-only public social network at posttxt.com and related mobile applications that use our API. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Who we are

postTXT is a public, text-only social network. Posts are limited to short text (and optional links/hashtags). There are no photo or video posts. Content you publish is public by design.

2. Information we collect

Account information

  • Handle (username) and password (stored only as a one-way hash; we never store your plaintext password)
  • Optional display name, bio, location, and avatar image
  • Optional email (private; used only if you provide it, for account-related contact)

Content and social activity

  • Posts and replies you create (including optional anonymous posts, which hide your handle on that post but remain associated with your account on our servers for moderation and integrity)
  • Likes, follows, reposts, and hashtags

Mobile app and API

  • When you sign in through the mobile app, we issue a Bearer token. The app stores that token on your device to authenticate requests to our API at /api/v1.
  • On the server we store a hashed form of API tokens (not the raw token) so we can validate and revoke them.

Web session

  • When you log in on the website, we use a session cookie (for example posttxt_session) to keep you signed in.

Technical and advertising data

  • Standard server logs (IP address, user agent, timestamps, request paths) for security, reliability, and abuse prevention
  • The website may load Google Ads / Google tag (conversion ID AW-18446660491), which can set or read cookies and similar technologies for advertising measurement. See Google’s policies for details on how Google processes this data.

3. How we use information

  • To operate postTXT: accounts, feeds, profiles, search, likes, follows, and hashtags
  • To authenticate you (website sessions and mobile Bearer tokens)
  • To moderate content, prevent abuse, and keep the service secure
  • To measure advertising and site performance when Google tags are present on the web
  • To respond to privacy or support requests you send us

We do not sell your personal information.

4. Public content

postTXT is a public network. Your handle, display name, bio, location, avatar, posts (unless posted anonymously, in which case your public display is anonymized), likes, follows, and similar activity may be visible to anyone on the internet, including search engines.

5. Third parties

  • Hosting: The service is hosted on infrastructure provided by Vultr.
  • Google: If Google Ads / Google tag scripts load on the website, Google may receive device and usage data for ads and measurement, subject to Google’s terms and your browser settings.

We do not claim to embed a separate ads SDK in the mobile app unless one is actually present in that app build. This policy discloses what the live website uses today.

6. Data retention

We retain account data, posts, and related social graph data for as long as your account exists and as needed to operate the service, comply with law, resolve disputes, and prevent abuse. Server logs are kept for a limited operational period. Deleted posts are removed from active display; residual copies may briefly remain in backups until those backups rotate.

7. Your choices and deletion

  • You can edit your profile (display name, bio, location, avatar, optional email) in Settings.
  • You can delete your own posts from the product.
  • You can log out of the website; on the mobile app you can clear the app’s stored Bearer token (for example by logging out or uninstalling the app).
  • You can permanently delete your account at any time from Settings in the postTXT app (Settings → Delete account) or on the website (Edit profile → Delete account). Deletion immediately and permanently removes your profile, posts and replies, likes, reposts, follows, direct messages and conversations, notifications, reports you filed, push device tokens, sign-in tokens, and profile photo. Residual copies may remain in backups until those backups rotate.
  • If you can’t access the app, you can also request account deletion by emailing us at the contact below. We will process reasonable requests within a timely period, subject to legal retention needs and public content already distributed.

8. Children

postTXT is not directed to children under 13 (or the minimum age required in your country). Do not create an account if you are under that age. See also our Child Safety Standards (CSAE policy and how to report).

9. Security

We use industry-standard practices such as hashed passwords and hashed API tokens. No method of transmission or storage is 100% secure; please choose a strong unique password.

10. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of postTXT after an update means you accept the revised policy.

11. Contact

Questions or privacy requests (including account deletion): contact@posttxt.com

Operator: Ken Mitre · posttxt.com