Privacy

What Wallflower doesn't collect

• No accounts, names or email addresses, for hosts or participants.
• Nothing that links a note to the person who wrote it. Not even the host can see who wrote what.
• Nothing that links one person's notes to each other. Each note is saved on its own.
• No advertising, tracking or analytics cookies.

What a board stores

• The board's name, welcome message, questions and colours.
• Each note's text, which question it answers, where it sits on the wall, and the minute it was posted.
• A count of how many people have taken part, with no record of who they are.
• A scrambled version of the host link's key, so the host can manage the board. The key itself isn't stored.

Anyone with a board's link can read its notes. The host can download them as a spreadsheet.

What's kept on your own device

• If you host a board, your browser remembers its host key so you stay the host on that device.
• If you answer, your browser remembers that you've been counted, so you're counted once.

These stay in your browser and are never sent anywhere except to that board.

When it's deleted

• Every board deletes itself, with all its notes, after the time its host chose: 1 day, 1 week or 30 days at most.
• The host can delete a board sooner, at any time. It's removed for everyone straight away.
• Notes a host has downloaded are theirs to look after once they're on the host's own computer.

Hosting and spam protection

Wallflower runs on Vercel, with its database at Neon. Like nearly every website, the hosting service keeps short-term technical logs of requests, which include network addresses, to keep the site running and secure. Wallflower doesn't connect those logs to any note.

To slow down spam, Wallflower counts how many requests come from each visitor in a short time. It identifies visitors only by a one-way scrambled code of their network address that changes every day. That code can't be turned back into the address, and it's never stored with notes.