Your privacy, behind the mask

Maskara is an anonymous social platform operated under HirayaX, based in Ottawa, Canada, with operational ties to the Philippines. This policy explains what information we collect, how it's used, and what stays anonymous.

Maskara is built around anonymity. We do not require your real name, and posts are never tied to a public profile. That said, certain technical information is collected to keep the platform running:

• Anonymous session identifiers — a randomly generated token used to track your activity within a session (e.g. your reactions, bookmarks). This token is not linked to your real identity.
• Content you submit — posts, replies, polls, group messages, and direct messages you choose to send.
• Optional email — only if you choose to provide one (e.g. for updates or account recovery), stored separately from your anonymous activity.
• Basic technical data — browser type and device information, collected automatically for security and abuse prevention, and never displayed publicly. Your IP address is used only to limit abuse, and it is not stored: it is converted into an irreversible fingerprint that changes every month, and those records are deleted after 24 hours.

• To operate core features (feed, reactions, groups, direct messages, polls)
• To detect and prevent abuse, spam, or harmful content
• To improve the platform based on aggregate, anonymized usage patterns
• To communicate with you, only if you've provided contact information

We do not sell your data, and we do not use your content to build an advertising profile.

Your nickname is not linked to any real-world identity. We never ask for your real name, and other users cannot see your IP address, your location, or anything else that identifies you outside Maskara.

We would rather be plain than reassuring, so here is the limit: Maskara is anonymous to other users, not to us. Your posts are connected to your account internally, which is what makes it possible for you to delete your own content, recover your account, and for us to act on abuse reports. Anyone with a nickname on the platform should treat it as a consistent identity — everything posted under one nickname can be read together.

Anything you post publicly — on the Wall or in a Confession Room — is visible to everyone, under your nickname.

Reactions are not anonymous to the person who posted. When you react to a post, the person who wrote it can see the nickname of everyone who reacted, and which reaction each person chose. Nobody else can see that list. If you would rather not be seen reacting to something, don't react to it.

Deleting a post removes it everywhere it appeared, including the copy in the Wall feed.

Maskara relies on infrastructure providers to operate, including database hosting (Supabase) and content delivery (Cloudflare). These providers process data on our behalf under their own security and privacy commitments, and do not have independent rights to use your data for their own purposes.

Posts and messages are retained as long as your account/session remains active or until you delete them. You may request deletion of your data at any time by contacting us (see Section 9).

Depending on where you live, you may have rights to access, correct, or delete your data, and to object to certain processing. We honor these requests regardless of your location, even where not strictly legally required, because anonymity and user control are core to what Maskara is.

Maskara is intended for users 18 years of age and older. We do not knowingly collect data from minors. If we become aware that a minor has used the platform, we will take steps to remove the associated data.

For privacy questions, deletion requests, or concerns, reach out to us through the contact details listed on the HirayaX website.

We may update this policy as Maskara evolves. Material changes will be reflected here with an updated date.