Skip to main content
Oubliette
Sign in

Privacy notice

Last updated . Written in plain English.

Oubliette is run by the owner of this website (“we”). It is built to know as little about you as possible. There are no ads, no analytics and no third-party trackers on this site or in the extension.

The short version

  • Hiding is cosmetic and local. The extension hides posts on your own screen. It never blocks, mutes or reports anyone, and never talks to Facebook, Instagram or X on your behalf.
  • Your browsing stays in your browser. We never receive the pages you visit, the posts you see or how many posts were hidden.
  • An account is optional. Without one, everything stays on your device.

What we store if you create an account

Your account holds no personal details. We do not store your name, your picture or avatar, your age, your postal address or your e-mail address.

  • Sign-in identifiers: the identifier Google or GitHub uses for your account (a number, not your name or e-mail address), so we recognise you next time.
  • A one-way hash of your e-mail address. When you sign in, Google or GitHub tells us your e-mail address and whether they have verified it. We use it once, to compute a keyed one-way hash (HMAC-SHA256), then discard it: the address itself is never stored, shown or logged. The hash lets us link your Google and GitHub sign-ins to the same account and recognise the site’s administrators. It cannot be turned back into your address.
  • A nickname, only if you choose one, in your dashboard. It is shown publicly instead of your pseudonym, as the owner of the lists you share. Please don’t use your real name. You can change or remove it at any time; moderators may remove one that is offensive or impersonates someone.
  • Your lists: their names, descriptions, visibility, and the accounts (handles, platform and optional notes) you add to them, including your personal list synced from the extension.
  • Your subscriptions to other people’s lists.
  • Connected browsers: a label, creation date and last-used date for each extension token. We only keep a one-way hash of the token itself.
  • Reports you send about a list, and moderation actions taken by moderators.

On the site you are shown by your nickname or, if you have none, by a pseudonym derived from your Oubliette account, such as “#7KQ2X” (the extension always shows the pseudonym). The names of lists you share (unlisted or public) and their accounts are visible to anyone with the link, with that nickname or pseudonym as their owner.

What we never collect

  • Your name, picture or avatar, age, postal address, or your e-mail address in readable form.
  • Your browsing history or the addresses of pages you visit.
  • The content of any post, comment or message.
  • Hidden-post counters: the “this session” and lifetime statistics in the extension never leave your browser.
  • Your social-media passwords or access to your social-media accounts.

Cookies

We use a single, essential session cookie to keep you signed in, plus short-lived cookies used during sign-in for security (CSRF protection). Your theme preference is stored in your browser. We do not use advertising or analytics cookies.

Where your data is processed

The website, API and database are hosted on Railway. Sign-in is handled by Google or GitHub under their own privacy policies. We only ask Google for your e-mail address (not your profile). GitHub’s sign-in always returns your public GitHub profile too; we discard it without storing it.

To protect the service from abuse, your IP address is used briefly, in memory only, to rate-limit requests to the website and the API. It is not stored in our database. Our hosting provider may keep standard request logs, which include IP addresses, for a limited time.

How long we keep it

We keep your account data for as long as you have an account. Deleted list entries are kept as short “tombstones” (the handle, its note and the dates) so deletions sync across your browsers. Once a tombstone is older than 90 days it is removed the next time that list changes or is synced; deleting the list removes all of its entries at once.

Deleting your data

  • Delete any of your lists from your dashboard at any time, and revoke connected browsers there too.
  • To delete your whole account, write to gcollet9@hotmail.fr from the e-mail address you sign in with. We do not keep your address, so we compute its one-way hash to find your account, then delete your account, lists, subscriptions and tokens. You can also tell us your pseudonym (such as “#7KQ2X”, shown in your dashboard’s Profile tab).
  • Removing the extension deletes everything it stored locally in your browser.

Your rights

You can ask us for a copy of your data, to correct it or to delete it. Contact gcollet9@hotmail.fr. If you are in the EU or UK you may also complain to your data-protection authority.

Changes

If we change this notice, we will update the date at the top of this page.