Privacy Policy
The short version: no ads, no trackers, no data brokers, no selling you out. We collect the minimum needed to run the commons, and it stays with us.
What we collect
- Account: your handle, email address, and a salted hash of your password (we never store or see the password itself).
- Content you choose to post: posts, replies, chat and direct messages, “now spinning” entries, your profile tagline and scenes, and any files you attach (audio, images, video).
- First-party visit beacons: a random anonymous identifier stored in your own browser, the page path, and the referring domain. No IP addresses are stored, no fingerprinting, no cross-site anything. This exists only so we know which parts of the site people use.
What we never do
- No third-party advertising, ad SDKs, or ad tracking — ever.
- No third-party analytics (no Google Analytics, no Meta pixel, none of it).
- No selling, renting, or brokering your data to anyone.
- No training AI models on your content, and our pages and your uploads are served with headers that tell outside AI crawlers to keep out.
Cookies
One cookie: your session, so you stay signed in. It is HttpOnly, Secure, and first-party. That’s it.
Payments
Tips and purchases are processed by Stripe (on the web) or by Apple and Google (in the apps). Card numbers never touch our servers. We receive only confirmation that a payment happened.
Direct messages
DMs are private between participants and are not published. Site operators do not read DMs except as required to investigate abuse reports or by law.
Your rights
- Delete your account any time in Settings → Delete account (in the apps and on the web). Your account, sessions, and personal profile are removed; your public posts are anonymized to “[deleted]” so conversations aren’t torn apart.
- Export: email us for a copy of your data.
- California (CCPA) and EU/UK (GDPR) residents: the above covers access, deletion, and portability; we don’t sell data, so there is nothing to opt out of.
Age
StonerRock.com is for people 13 and older. If we learn an account belongs to a child under 13 we will delete it.
Changes
If this policy changes we will post it here with a new effective date. We will never quietly downgrade your privacy.
Contact
Questions, exports, takedowns: [email protected]