privacy
what we collect
when you submit a confession we receive your IP address, the confession text and, if you attach them, your before and after photos. that's it. there are no accounts, no email addresses, no names.
photos
faces are blurred and location and camera data are removed before a photo is saved. photos stay private until the confession is approved. they are deleted if they are not published, or when they are removed. images reported as illegal are kept in locked storage only so they can be passed to the authorities. to remove your photos at any time, email confess@peptideconfessions.com with your confession number.
IP addresses
your IP address is hashed with SHA-256 before storage and is never stored in raw form. the hash is used only for rate limiting (to prevent spam) and is not linked to your identity.
analytics
we use PostHog for product analytics. PostHog collects anonymized usage events (pages viewed, form interactions). no PII is included in these events. admin pages are excluded from tracking entirely.
third parties
we use Vercel for hosting and Supabase for the database. confession content that is approved for publication may be cross-posted to X, Instagram, and Telegram. we do not sell data or share it with advertisers.
cookies
no marketing or tracking cookies are set. the only cookies on this site are those required for the admin authentication session (admin only — not set for regular visitors).