Privacy Policy

Last updated: September 2026

1. What this covers

This policy describes what Time Pass (“we”, “the site”) collects when you use time-pass.app, why we collect it, who else can see it, how long we keep it, and what you can ask us to do with it. It applies to the confession wall, the games, friends and messages, and your account.

2. What we collect

2.1 If you never make an account

You can browse the wall and play the games without signing up. In that case we hold:

• A random device identifier. A string generated in your browser and stored in localStorage under tp_device_id. It is not linked to you, your name, or your email. Its only job is to make sure that opening the same confession fifty times counts as one read rather than fifty. You can wipe it any time by clearing site data.
• Standard server logs. Our hosting providers record IP addresses, timestamps, requested URLs and user-agent strings, as essentially every web server does. We do not use these for analytics or profiling.

We do not set advertising cookies, we do not run third-party analytics, and we do not track you across other sites.

2.2 If you make an account

• Email address — used to sign you in, confirm your account, and send password resets. Never shown to other users.
• Password — stored only as a salted hash by our authentication provider. We never see it and cannot recover it.
• Username and display name — both public.
• Profile picture, if you upload one — public. See section 4.
• Session cookies — set by our authentication provider to keep you signed in. These are strictly necessary; the site cannot work without them.

2.3 What you create while using the site

• Confessions, as text or as a voice recording, along with whether you chose to post anonymously.
• Replies you write under other people’s confessions.
• Reads. One row per confession per device, so that view counts and the points they award mean something.
• Direct messages between you and people you are friends with. These are stored in plain text in our database and are not end-to-end encrypted. Do not use them for anything you would not want an administrator to be able to read.
• Friendships — who you sent requests to, who sent them to you, and who accepted.
• Game activity — which games you opened and when, and which you liked.
• Points — an append-only record of every point you earned and why.
• Who invited you. If you signed up through someone’s invite link, we store which account that was, permanently, so their reward can be paid and audited. They see that you joined and what your points total is — not your email, and not what you have written.
• Your payout wallet, if you add one: the network and the receiving address you typed in. Nothing else. We never ask for, receive or store a private key or a seed phrase, and we do not hold funds on your behalf.
• Payout requests — the amount, the address it was sent to, the status, any note we attached, and the transaction reference. These outlive your account; see section 6.
• Presence — while you have the site open and are signed in, your username, display name and profile picture are broadcast to other visitors so you appear on the radar. This is live only; it is not stored.

3. Anonymity, precisely

Because this is the whole point of the site, here is exactly what “anonymous” means here.

What other users see. Nothing. When a confession or a reply is marked anonymous, the name fields on that record are blanked before it is even saved, and the public view the wall reads from does not contain your account id at all. There is no way for another user to work out who posted, and no API call that would tell them.

What we see. Every confession carries the account id of whoever posted it. Site administrators can view that, and there is a page in our admin panel that exists specifically to do so. It is there so that we can act on reports, remove content that breaks the rules, and stop someone abusing the site. It is not there for browsing.

Why it works this way. A genuinely unattributed post could not earn you points, could not be deleted by you later, and could not be moderated at all — one bad actor could flood the wall with no recourse. We chose traceable-to-staff over untraceable-to-anyone, and we would rather tell you that plainly than let you assume otherwise.

4. Voice recordings and profile pictures

Voice confessions are stored in a private bucket. They are not publicly reachable by URL, and playing one requires a signed-in session and a short-lived signed link generated at the moment you press play.

Profile pictures are stored in a public bucket, because they are displayed to anyone who can see you online. Assume the file is publicly reachable by URL once uploaded. Your browser crops the image square and shrinks it to 256×256 before uploading; we do not receive the original file, and no location or camera metadata survives that step.

5. Who else your data passes through

We are a small site and use third-party infrastructure rather than running our own. Your data passes through:

• Supabase — database, authentication, file storage and realtime. Everything in section 2 lives here.
• Vercel — web hosting. Sees requests and standard server logs.
• Google Fonts — serves the site’s typefaces. Your browser requests these directly, which discloses your IP address to Google.
• jsDelivr, unpkg and cdnjs — serve JavaScript libraries the site depends on. Same disclosure as above.
• PeerJS public broker — used only when you challenge someone to a live game, to introduce the two browsers to each other. Your username and the game invite pass through it.

Each of these has its own privacy policy, which governs what they do with what they receive. We do not sell your data to anyone, and we do not share it with advertisers.

6. How long we keep things

• Your account and its content — until you delete the account.
• Deleting your account removes your profile, confessions, replies, messages, friendships, game history and points, by database cascade. This is immediate and cannot be undone.
• Deleting a single confession also removes its replies, its read history, and the points it earned you.
• Payout records — the exception to all of the above. If we have sent you money, the record of that payment (amount, date, wallet address, transaction reference) is kept after your account is deleted, because a payment we made has to stay accountable and because tax and anti-fraud obligations require it. It is detached from your profile, not erased.
• Server logs — kept for the retention period of the provider in question, which is measured in days to weeks, not years.
• Backups — content may persist in provider backups for a short period after deletion before those roll over.

7. What you can ask for

Regardless of where you live, you can ask us to:

• tell you what we hold about you;
• correct anything that is wrong — most of it you can edit yourself;
• delete your account and everything attached to it;
• export what you have written.

If you are in the UK, EU, or another jurisdiction with equivalent law, you also have the rights that law gives you, including the right to object to processing and to complain to your data protection authority.

8. Security, honestly stated

Access to your data is enforced at the database level, not just in the website’s JavaScript: row-level security rules decide who can read and write each row, so a crafted request gets the same refusal a button does. Passwords are hashed by our auth provider. Voice notes are in a private bucket.

What we do not claim: this is not an end-to-end encrypted service, direct messages are readable by administrators, and no system is immune to compromise. If we ever discover a breach affecting your data, we will say so publicly on the site rather than quietly.

9. Children

Time Pass is not intended for anyone under 13, and we do not knowingly collect data from children under 13. If you believe a child has created an account, tell us and we will remove it. Some jurisdictions set a higher age for consent to data processing; if yours does, that age applies to you.

10. Changes to this policy

If we change this policy in a way that materially affects what we collect or who sees it, we will update the date at the top and put a notice on the site. Continuing to use Time Pass after that means you accept the revised policy.