We collect your email address, your answers to a few setup questions, what you write in the gym, and product events that tell us whether Unlurk is working. Other members never see your name, because we never give it to them. We do not sell your data. Our marketing landing page carries a Meta advertising pixel so we can tell which of our ads actually reach people, and that is the only tracking anywhere near Unlurk: the signed in product has none. Email us and we will delete your account.

Your account. Your email address, the time zone your browser reports at signup so morning emails arrive in the morning, and a timestamp recording the moment you tapped publish on your first post.

How you found us. If you signed up from one of our ads, we record which version of the landing page you were shown and the utm_source in the link you followed, so we can tell which ad and which wording actually brought people in. That is a single row attached to your account, written once at signup.

Your setup answers. What you picked for your goals, the networks you want to post on, and what is blocking you, plus anything you typed in the free text goal box.

Your comfort readings. Where you put the slider each time we ask how it would feel to post about yourself under your real name. One reading before you start and one after each exercise you answer.

What you write. Your posts and replies, the reactions you tap on other people's posts, which exercises you have completed and when, and which post you were assigned to reply to.

Pricing research. The amount you moved the slider to, whether you said not yet, and any answer you gave to the short survey if you slid to zero. We do not hold card or payment details. There is nothing to hold, because we do not take payments.

Product events. A log of what happened in the product: you signed up, you answered the questions, you started, you finished an exercise, you reached the halfway screen. These carry your account id and a small amount of detail about the step, and they are how we learn whether the thing works.

Email records. Which emails we planned to send you, when they were scheduled, whether they went out, and the delivery provider's id for the message, so we can tell a delivered email from a broken one.

Reports. If you report a post or reply, we keep the report, the reason you gave, and who filed it, so we can act on it.

We do not collect your name, your real world identity, your social media accounts, your contacts, or your location. We never ask for them and there is nowhere to enter them.

• To run the product. Your email signs you in. Your answers shape your plan. Your completions draw your card.
• To email you the program. The exercises arrive by email, on a schedule built from where you are in the journey.
• To keep the gym safe. Screening, moderation, reports, and daily limits so nobody floods the feed.
• To find out whether Unlurk works. Product events, in aggregate, tell us where people stall and what to fix.
• To decide what to build and what to charge. The slider amounts are research, and nothing else.
• To find out which of our ads work. The pixel on the landing page, and the variant recorded at signup, tell us which ad and which wording brought someone in, so we stop paying for the ones that do not.

We hold and use your data because you asked us to run this program for you, and we cannot run it without doing so. That is the contract between us. Publishing your first post rests on the consent you gave by tapping the button in your welcome email, and you can withdraw that consent by asking us to take the post down. Keeping the gym safe and understanding whether the product works rest on our legitimate interest in running a service that is not harmful and not useless, weighed against the fact that the gym is anonymous by design.

The advertising pixel on the landing page is the one thing here that needs your permission rather than our interest, and we are not yet asking for it with a consent banner. If you are in the UK or the EEA and would rather it did not run, block trackers in your browser or use an ad blocker, which stops both the script and the fallback image. We would rather tell you that than pretend the pixel is not there.

If you are in the UK or the European Economic Area you have rights to see, correct, export, restrict, or delete your data, and to complain to your data protection authority. Email us and we will do it.

Other members see anonymous writing only. Posts and replies appear in the gym with no name, no username, and no handle. This is not a display setting. The gym is built on views that do not contain the author column at all, so there is nothing for the app to leak accidentally. Showing who wrote something would take a deliberate change to our code.

The small team behind Unlurk can see authorship. We can link a post or reply to an account, and we need to, so we can moderate the space, answer reports, act on abuse, and honor a deletion request. Access is limited to the people running the product.

Nobody who is not signed in sees anything. The gym is invisible when logged out. It is not public and search engines cannot index it.

We use a few companies to run Unlurk. They handle data on our instructions and for no purpose of their own.

• Supabase. The database and the sign in system. Everything described above lives here.
• Vercel. Hosting. Serves the app and holds the usual server logs a host keeps.
• Railway. Runs the scheduler that decides when an email is due.
• Mailgun. Sends the email and tells us whether it arrived. Your email address goes here.
• Stripe. Connected but not in use. We are not taking payments during early access, so no card details and no payment data reach Stripe. If that changes we will update this page before it does.
• Meta. Our marketing landing page loads the Meta advertising pixel, which reports back to Meta that a browser viewed the page and that someone submitted the signup form. It sees your browser and your IP address, not your email address or anything you write in the product. Meta uses it to measure and target our ads, which is a purpose of their own, so this one is not a plain instructions only arrangement. It runs on the landing page only.
• Google Fonts. The landing page loads two typefaces from Google's font servers, which means your browser's request, including your IP address, reaches Google to fetch them. Nothing about your account is sent.

There is no Google Analytics anywhere, and no third party analytics, advertising network, or pixel inside the signed in product. Everything in the two entries above is on the marketing landing page only, before you have an account.

Inside Unlurk, cookies exist for one reason: to keep you signed in after you tap the link in your email. That is it. No advertising cookies, no tracking cookies, nothing that follows you to other websites.

The marketing landing page is the exception, and we would rather say so plainly. It loads the Meta pixel, which sets Meta's own cookies in your browser and can be used to measure our ads and to show you more of them. If you block the pixel or have scripts turned off, a single pixel sized image still loads from Meta as a fallback beacon, which reports the same page view without any script running. Blocking trackers in your browser, or an ad blocker, stops both. Nothing about the pixel is needed to sign up, and it never runs once you are inside the product.

We keep your account and your writing while your account exists, because the product is a record of what you did. Email delivery records and product events are kept while we are still learning from them. Reports are kept while they are open and for a while after, so a pattern of behavior does not vanish between reports. When you ask us to delete your account, what happens next is the section below.

Email arel@alphadar.com from the address you signed up with and ask. You do not need a reason. We aim to do it within thirty days.

Here is exactly what deletion does, so there is no surprise.

• Erased. Your account and email address, your setup answers, your comfort readings, your slider amount and survey answer, your completed exercises, your reactions, and your email records. Those rows are removed.
• Kept, with authorship permanently erased. Your posts and replies stay in the gym, but the link back to you is destroyed, not hidden. Nobody, including us, can tell afterwards that a given post was yours.

We do it this way because other members replied to your posts, and deleting the post would delete the reply somebody wrote to you. Leaving the words with the authorship erased keeps their work intact without keeping yours attached to you. If you want a specific post removed entirely rather than kept this way, ask and we will remove it.

Deleted data may sit in encrypted backups for a short period before those backups roll over.

The exercises arrive by email, so email is the product rather than marketing. Every email we send has an unsubscribe link in its footer, and the same link is in the headers so your mail app can offer its own unsubscribe button. It needs no password: the link itself carries a signature that proves it is yours, because making you sign in to stop mail you did not ask for is not really a way to stop it.

Tapping it marks your account as suppressed, with the reason and the time, and cancels every email still queued for you. A bounce or a spam complaint does the same thing without you having to do anything. Once your account is suppressed nothing further is sent, and it stays suppressed until you ask us to turn it back on. Your account stays and the gym still works, you just have to come back on your own.

Unlurk is not for people under 16. We do not knowingly collect data from anyone younger. If you believe a child has signed up, email us and we will delete the account.

Access to the gym is restricted at the database level, not just in the app. Member accounts have no read access to the tables that hold authorship. We take this seriously. We are also a small team and no system is perfect, so we cannot promise a breach will never happen. If one does and it affects you, we will tell you.

We may update this page. The current version always lives at this address, dated. If a change is significant, such as a new company touching your data or payments turning on, we will email you before it takes effect.

Questions, requests, or a deletion: arel@alphadar.com. A person reads that address.