The fine print

Privacy policy

This page is written to be honest and readable. It is not legal advice. A lawyer should review it before Unlurk charges anyone anything.

Unlurk asks people to do something that scares them, so being straight about data is part of the deal. This page says what we hold, why, and who can see it. The rules for using the product are on the terms page.

The short version

We collect your email address, your answers to a few setup questions, what you write in the gym, and product events that tell us whether Unlurk is working. Other members never see your name, because we never give it to them. We do not sell your data, we do not run ads, and we do not use tracking cookies. Email us and we will delete your account.

What we collect

Your account. Your email address, the time zone your browser reported so morning emails arrive in the morning, and a timestamp recording that you ticked the box allowing your first post.

Your setup answers. What you picked for your goals, the networks you want to post on, and what is blocking you, plus anything you typed in the free text goal box.

Your fear ratings. Two numbers from one to five: how scary posting feels before you start and after you finish the seven exercises.

What you write. Your posts and replies, the reactions you tap on other people's posts, which exercises you have completed and when, and which post you were assigned to reply to.

Pricing research. The amount you moved the slider to, whether you said not yet, and any answer you gave to the short survey if you slid to zero. We do not hold card or payment details. There is nothing to hold, because we do not take payments.

Product events. A log of what happened in the product: you signed up, you answered the questions, you started, you finished an exercise, you reached the halfway screen. These carry your account id and a small amount of detail about the step, and they are how we learn whether the thing works.

Email records. Which emails we planned to send you, when they were scheduled, whether they went out, and the delivery provider's id for the message, so we can tell a delivered email from a broken one.

Reports. If you report a post or reply, we keep the report, the reason you gave, and who filed it, so we can act on it.

We do not collect your name, your real world identity, your social media accounts, your contacts, or your location. We never ask for them and there is nowhere to enter them.

Why we hold it

  • To run the product. Your email signs you in. Your answers shape your plan. Your completions draw your card.
  • To email you the program. The exercises arrive by email, on a schedule built from where you are in the journey.
  • To keep the gym safe. Screening, moderation, reports, and daily limits so nobody floods the feed.
  • To find out whether Unlurk works. Product events, in aggregate, tell us where people stall and what to fix.
  • To decide what to build and what to charge. The slider amounts are research, and nothing else.

What lets us do this, in plain words

We hold and use your data because you asked us to run this program for you, and we cannot run it without doing so. That is the contract between us. Publishing your first post rests on the consent you gave by ticking the box, and you can withdraw that consent by asking us to take the post down. Keeping the gym safe and understanding whether the product works rest on our legitimate interest in running a service that is not harmful and not useless, weighed against the fact that the gym is anonymous by design.

If you are in the UK or the European Economic Area you have rights to see, correct, export, restrict, or delete your data, and to complain to your data protection authority. Email us and we will do it.

Who can see what

Other members see anonymous writing only. Posts and replies appear in the gym with no name, no username, and no handle. This is not a display setting. The gym is built on views that do not contain the author column at all, so there is nothing for the app to leak accidentally. Showing who wrote something would take a deliberate change to our code.

The small team behind Unlurk can see authorship. We can link a post or reply to an account, and we need to, so we can moderate the space, answer reports, act on abuse, and honor a deletion request. Access is limited to the people running the product.

Nobody who is not signed in sees anything. The gym is invisible when logged out. It is not public and search engines cannot index it.

Who else touches the data

We use a few companies to run Unlurk. They handle data on our instructions and for no purpose of their own.

  • Supabase. The database and the sign in system. Everything described above lives here.
  • Vercel. Hosting. Serves the app and holds the usual server logs a host keeps.
  • Railway. Runs the scheduler that decides when an email is due.
  • Mailgun. Sends the email and tells us whether it arrived. Your email address goes here.
  • Stripe. Connected but not in use. We are not taking payments during early access, so no card details and no payment data reach Stripe. If that changes we will update this page before it does.

We do not use third party analytics, advertising networks, or social media pixels. There is no Google Analytics on this site.

Cookies

Unlurk sets cookies for one reason: to keep you signed in after you tap the link in your email. That is it. There are no advertising cookies, no tracking cookies, and nothing that follows you to other websites.

How long we keep it

We keep your account and your writing while your account exists, because the product is a record of what you did. Email delivery records and product events are kept while we are still learning from them. Reports are kept while they are open and for a while after, so a pattern of behavior does not vanish between reports. When you ask us to delete your account, what happens next is the section below.

Deleting your account

Email arel@alphadar.com from the address you signed up with and ask. You do not need a reason. We aim to do it within thirty days.

Here is exactly what deletion does, so there is no surprise.

  • Erased. Your account and email address, your setup answers, your fear ratings, your slider amount and survey answer, your completed exercises, your reactions, and your email records. Those rows are removed.
  • Kept, with authorship permanently erased. Your posts and replies stay in the gym, but the link back to you is destroyed, not hidden. Nobody, including us, can tell afterwards that a given post was yours.

We do it this way because other members replied to your posts, and deleting the post would delete the reply somebody wrote to you. Leaving the words with the authorship erased keeps their work intact without keeping yours attached to you. If you want a specific post removed entirely rather than kept this way, ask and we will remove it.

Deleted data may sit in encrypted backups for a short period before those backups roll over.

Email you get, and stopping it

The exercises arrive by email, so email is the product rather than marketing. Every email has an unsubscribe link. If you unsubscribe, bounce, or mark us as spam, we stop sending immediately, cancel everything already queued for you, and do not email you again. Your account stays and the gym still works, you just have to come back on your own.

Children

Unlurk is not for people under 16. We do not knowingly collect data from anyone younger. If you believe a child has signed up, email us and we will delete the account.

Security, honestly

Access to the gym is restricted at the database level, not just in the app. Member accounts have no read access to the tables that hold authorship. We take this seriously. We are also a small team and no system is perfect, so we cannot promise a breach will never happen. If one does and it affects you, we will tell you.

Changes and contact

We may update this page. The current version always lives at this address, dated. If a change is significant, such as a new company touching your data or payments turning on, we will email you before it takes effect.

Questions, requests, or a deletion: arel@alphadar.com. A person reads that address.

Last updated July 31, 2026. See also the terms of use.