Privacy
Effective July 30, 2026
What we process
pox.me processes account identifiers, authentication and MFA records, identity/profile content you provide, linked credential metadata, communications, billing records, security logs, and encrypted vault data.
Why and where
We use this data to operate, secure, support, and bill the service. Core infrastructure runs on Cloudflare; optional integrations such as Stripe, Google Analytics, PostHog, social providers, and external vaults receive only the data needed for the feature you choose. PostHog product analytics can include page interaction, performance, errors, and privacy-masked session replay after you explicitly accept analytics.
Public and private identity data
Only active identity records you mark public are returned on public profiles. Private-mode linked records are withheld, and public profile metadata is restricted to supported display fields.
Retention and deletion
Account deletion has a 30-day cancellation period. Operational and legal records may be retained only where necessary for security, fraud, accounting, dispute resolution, or legal obligations. Backup copies age out under provider retention schedules.
Your choices
You can change profile visibility, disconnect integrations, export or delete content through the product, reject optional analytics, and request access, correction, or deletion by emailing jorge@pox.me.