ADHX · Privacy

Privacy

This is the hosted service at adhx.com (and staging). If you self-host, you are the data controller — the software still stores the same kinds of rows.

Last updated 22 August 2026. The canonical copy is PRIVACY.md in the repo.

Short version

• Your collection (saves, archive, private tags, sign-in) is private to you.
• Preview pages, Live / trending, public playlists, and the leaderboard are public. They show posts and curator usernames, never account IDs.
• activity.userId and collection_events.viewerId exist only for moderation. No public query selects them.
• We do not sell data, run ads, or run metered AI on your library.

Account and collection

Sign-in stores a username, optional display name and avatar, an email and/or X identity, and a signed httpOnly session cookie (30 days). X tokens are encrypted at rest. Bookmarks, tags, archive, and preferences are keyed by your account — other users cannot read them. Archive never writes a public pulse. A tag is private until you make it a public playlist.

Community pulse

Preview, save, and send may append an anonymous activity row. Playlist view/clone may append a leaderboard event. Captions and thumbnails are resolved on the server; the client cannot invent what appears on the front page.

Third parties

X (if you connect it), Resend (magic-link email), Sentry in production (user ids hashed before metrics), Fly.io (host + volume), and platform CDNs via allowlisted media proxies. No advertising pixels.

Your choices

Watch without an account. Keep tags private. Archive without a public pulse. Disconnect X, clear data, or delete the account in Settings.

Questions: [email protected]. Vulnerabilities: see SECURITY.md.