Legal response

Ash Or Share produces the narrowest lawful set of records that still answers a valid request. We do not volunteer extra context, casual browsing notes, or research samples as if they were an investigation file.

Where notice to the affected person is lawful, we give it. Where a court order or statute forbids notice, we follow that limit.

Delete means delete: account rows, room shares, penpal threads, and sessions are removed when someone permanently deletes. Backups must expire on a short operator-set schedule. Hidden content is not research material.

We minimize what we keep. Security logs and abuse-only IP records are short-lived and are not stored beside posts. Cookieless Plausible page analytics may run on the public site; they do not receive email, names, or letter text, and admin paths are excluded. There is no fingerprint SDK and no marketing pixel on rooms or penpal.

Email identifies a person to the system and, under lawful process, may still identify them. Display names are not unique. We do not promise that someone cannot be identified.