what we keep, what we don't

Straight talk about data. If something is unclear, email support@adhddiaryproject.com and we will fix it.

Last updated April 24, 2026.

the short version

Anonymous diary entries do not carry your name or email. We keep a sign-in token in your browser so you stay logged in, and that is the only thing we store client-side. We do not sell your data. We do not run third-party ad trackers. We do not build shadow profiles. You can delete your account anytime.

what we collect

If you are just reading or writing anonymously: we store the entry content you submit, the mode you chose, and the handwriting font. We do not store your IP address with the entry. Our server sees your IP briefly to apply rate limits and to block abuse, but we do not link it to your content.

If you make an account: we store your email address, a hashed password (we never see your plaintext password), the date you joined, your display name if you set one, and a timestamp for when you accepted these policies. We also store a list of the entries you wrote, the entries you saved, and your conversations with Tiff's Bot if you use that feature.

If you sign up for the email list: your email goes to Kit (the email platform we use). Kit handles unsubscribes and delivery. You can unsubscribe from any email they send.

Tiff's Bot and chat history

Tiff's Bot is an AI chatbot available to logged-in users. When you use it, we keep your messages so the conversation can continue where you left off.

We also keep a short summary so Bot can remember the shape of past sessions without re-reading every word. Summaries do not include exact names or specific events. You can delete both the full history and the summary anytime from the Privacy and Data tab, and both are cleared when you delete your account.

crisis events (the one exception)

If the safety classifier detects language that suggests active intent to harm yourself, we flag the entry in our moderation system. The flag is attached to the entry itself, along with the severity level the classifier assigned and a timestamp. A small operations team reviews flagged entries to decide whether to remove them from the wall, reach out with additional resources, or take no action. Access to flagged content is logged.

When you delete your account, your user ID is stripped from flagged entries. The anonymized entry stays on the wall or in the moderation record for a minimum of 90 days after account deletion for safety audit. That is the only data we retain after you delete your account.

cookies and tracking

We do not use cookies. Your sign-in session is carried by a random token that the site keeps in your browser's local storage; it expires after 30 days of inactivity or immediately when you log out or reset your password. We do not use third- party tracking cookies, analytics cookies, or ad cookies.

Cloudflare provides anonymized traffic analytics (page views, country-level geography, nothing that identifies you). That data does not leave Cloudflare.

who we share data with

Every service that touches your data, and only what they need:

Cloudflare. Hosts the site and every piece of data behind it: our database (D1), file storage (R2), session tokens (Workers KV), real-time chat (Durable Objects), body-doubling video (Cloudflare Calls), AI moderation + embeddings (Workers AI, Vectorize), background jobs (Queues), and anonymous product analytics (Analytics Engine). Inbound email for the @adhddiaryproject.com addresses also flows through Cloudflare Email Routing.
Stripe. If you subscribe, Stripe handles billing. They hold your card details directly, and we never see them. We keep your Stripe customer ID so we know which account a subscription belongs to.
Resend. Sends transactional email (password resets, email verification, account deletion confirmations, and ops notifications to our team).
Kit. Sends newsletter and list emails if you opted in. Only the email address you gave to the waitlist or account is shared with Kit.
Operations mailbox. When the safety pipeline, a user-submitted report, or an uncaught error needs a human, a short notification lands in an ops inbox Tiff monitors. The notification contains record IDs and a link to the admin tool; it does not contain the report content, user emails, or any free-text reason field. Full detail stays in the database and is read via our internal tools.

We do not sell data. We do not trade it. We do not allow any of these subprocessors to use your data for their own marketing.

your rights

You can do all of these things yourself from the account page:

Download your data. Export a JSON file of your entries, saved entries, and Bot summaries.
Delete your Bot history. Wipes full messages and the rolling summary.
Delete your account. Soft delete for 7 days (with a restore link in case you change your mind), then permanent deletion.

If you are in the EU, UK, or California, you have the same rights under GDPR, UK GDPR, and CCPA. Email support@adhddiaryproject.com if you want help using them.

how long we keep data

Anonymous wall entries: indefinitely (they carry no user ID).
Account profile: until you delete the account.
Bot chat history + summary: until you delete them from the Privacy and Data tab, or until you delete your account.
Soft-deleted accounts: 7 days, then hard-deleted by a daily job (also purges your content from our semantic-search index).
Flagged entries after account deletion: minimum 90 days, for safety audit. The entry stays on record; your user ID is removed.
Stripe payment records: per Stripe's retention policy.
Ops email notifications (sent to our team when something needs review): retained by our email provider per their policy. Notifications do not contain your content; only record IDs.

children

ADP is for adults 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor signed up, email support@adhddiaryproject.com and we will delete the account immediately.

changes to this policy

If we change this policy in a way that materially affects your data, we will update the date at the top and notify you. For small clarifications (typos, rewording), we just update the date.

contact

Email support@adhddiaryproject.com. A real human reads it, and we will answer.