DRAFT. This text is a template and has NOT been reviewed by a lawyer. Replace every highlighted placeholder and have it reviewed before you launch. Last updated: 2026-11-10.
Privacy policy
This policy lists exactly what saynext.io stores. We keep it short on purpose: there are no accounts and no tracking cookies. We count visits with Vercel Web Analytics, which uses no cookies and does not store who you are (see below).
1. Controller
[YOUR FULL NAME OR COMPANY NAME], [STREET, POSTCODE, CITY, COUNTRY], [YOUR CONTACT EMAIL] (company number [COMPANY REGISTRATION NUMBER]).
2. What we store, why, and for how long
| Data | Purpose | Legal basis | Kept |
|---|---|---|---|
| The sentence you submit (public) | Show it on the wall, archive, user and leaderboard pages; run the service | Contract (Art. 6(1)(b)); legitimate interest in a public archive (6(1)(f)) | Until the Service ends or we remove it |
| Your optional username (public) | Show it next to the sentence, on the leaderboard and on your user page | Contract (6(1)(b)); legitimate interest (6(1)(f)) | Until the Service ends or we remove it |
| Timestamps: when you ordered, paid, and when your sentence was on the wall | Run the wall and the leaderboard (time on the wall); accounting; fraud prevention | Contract; legal obligation (6(1)(c)); legitimate interest | As long as the sentence is stored |
| Status of your submission (e.g. pending, live, removed, refunded) and the amount and currency | Process payments and refunds; show the archive | Contract; legal obligation | As long as the sentence is stored |
| What you agreed to before paying, and your request to publish when you pressed Publish (the text shown and the time) | Prove the consent and request required by consumer law | Legal obligation; legitimate interest (legal claims) | As long as the sentence is stored |
| A salted (keyed) hash of your IP address, and a hash of IP + payment e-mail. We cannot turn these back into the IP or e-mail. | Cooldown between payments, rate limiting, blocking abusers | Legitimate interest in security and fraud prevention (6(1)(f)) | Deleted automatically after 30 days |
| Counters for rate limiting (keyed by the IP hash) | Stop automated abuse | Legitimate interest | Deleted within 24 hours |
| IP-hash bans (only the hash, a reason and an expiry date) | Keep banned abusers out | Legitimate interest | Expire after 365 days |
| Notices of illegal content: the message ID, your reason, your name and e-mail | Handle the notice, reply to you (EU Digital Services Act) | Legal obligation (6(1)(c)) | Up to 3 years |
| Audit log of moderation actions (what was done, to which sentence/username, why) | Accountability and handling complaints | Legal obligation; legitimate interest | Up to 3 years |
| For owned usernames: a keyed hash of the e-mail you paid with (we cannot turn it back into the address), which name it owns, when it was claimed and last used, and hashes of the private keys kept in your browsers | Make sure only the owner can use a name; send the owner a one-time link to use it on a new device | Contract (6(1)(b)); legitimate interest in preventing impersonation (6(1)(f)) | Until you or we release the name, or 12 months after it was last used |
| If you create an account (optional): your e-mail address and, if you sign in with Google or Apple, the account ID they give us (Apple may give a private relay address). Stored by Supabase Auth | Sign you in, show your names and purchases on every device | Contract (6(1)(b)) | Until you delete your account (on the account page) |
| Anonymous visit statistics (Vercel Web Analytics): page visited, referring site, country, browser, operating system and device type. No cookies; repeat visits on the same day are recognised only by a hash of your IP address and browser that is discarded after 24 hours, so you cannot be identified | Count visitors and see which pages are used | Legitimate interest in running and improving the site (6(1)(f)) | Only as anonymous totals, for as long as the analytics plan keeps them |
Unless you create an account, we do not store your e-mail address, name, address or card details. Stripe holds them (see below); for owned usernames we keep only a keyed hash of the e-mail. When we need to e-mail you (for example to tell you a sentence was removed or refunded) we look your e-mail up at Stripe at that moment.
Cookies and browser storage: if you sign in (an account or the administrator), a strictly necessary sign-in cookie. If you buy with a username, a private key for that name is kept in your browser’s local storage so you can use the name again on that device; it is not used to track you and you can delete it at any time by clearing the site’s data. Nothing else is stored on your device, and nothing on this site needs a cookie banner.
3. Sentences and usernames are public
Everything you write in the sentence or username field is published on the wall and then kept in the public archive, on the leaderboard and on your username’s page. Do not write personal data you do not want public. Search engines may copy it.
4. Who else receives data (processors)
- Stripe: payment page, card data, e-mail, billing country, tax (Stripe Tax), fraud checks. Stripe is an independent controller for payment and compliance data. stripe.com/privacy
- Supabase: our database (EU region) and, if you create an account, sign-in (Supabase Auth). If you sign in with Google or Apple, they confirm who you are to us.
- Vercel: hosting (EU region). Technical server logs, including IP addresses, are kept by Vercel for a short period. Vercel Web Analytics counts page views without cookies and without storing personal data. Vercel analytics privacy.
- Database host ([Neon or Supabase, EU region]): stores the data listed above.
- OpenAI: your sentence and username are sent to OpenAI’s moderation service to check them, before and after payment. They are not sent with your IP address or e-mail.
- Cloudflare Turnstile: a robot check on the payment and report forms. Cloudflare receives your IP address and browser details to decide whether you are a robot.
- Resend: sends our e-mails (your payment e-mail with the Publish link, publish and withdrawal confirmations, refund and removal notices, report acknowledgements, admin sign-in).
Some of these providers are in the United States. Transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses. [LAWYER: confirm for each provider]
5. Your rights
You can ask us for access, correction, deletion, restriction or a copy of your data, and object to processing based on legitimate interest. Because we do not hold your e-mail address, we may ask you to prove which sentence is yours (for example by the sentence text, time of payment and the e-mail used at Stripe). To ask for a sentence or username to be removed, write to [YOUR CONTACT EMAIL] with the message ID (shown in the “Report” link of every sentence), or use the report form. We will remove or anonymise it where the law requires, and tell you what we decided. Note that a removed sentence stays in the archive as “[removed by moderator]” without its text, and its time no longer counts on the leaderboard. You can complain to your data-protection authority.
6. Security
Data is stored in the EU. Connections use HTTPS. IP addresses are never stored in readable form, only as keyed hashes that are wiped after 30 days.
7. Children
The Service is not meant for people under 16.
8. Changes
We will update this page when what we store changes.