Privacy Policy

Last updated: September 23, 2026 · Applies to the Saturn1ne app and saturn1ne.com

Saturn1ne is built on a simple idea: you should be able to say what's on your mind without it being attached to who you are. This policy describes what the service actually collects — and, just as importantly, what it is deliberately built not to collect.

What we don't collect

No account, no identity. There is no sign-up. No name, email address, phone number, or password is ever requested or stored.
No precise location. If you allow location access, the app rounds your position to about a kilometer on your phone before sending it, and our servers reduce it to an area roughly a kilometer wide before storing anything. Exact coordinates never leave your phone.
No permanent ID on your posts. Other people see the handle a post was made under, never an ID that ties your posts together — and a new handle applies only to what you post after it; past posts and conversations keep the one they had.
No IP address records. Saturn1ne never stores your IP address. To slow down automated abuse, it uses a scrambled, one-way code made from it instead: to count requests, and to tell whether several reports of the same post came from one connection. A report's code is erased once a moderator has looked at it.
No photo metadata. Photos are scrubbed on your device before upload — EXIF data, including any GPS coordinates embedded by your camera, is removed and never reaches our servers.
No advertising or tracking. There are no ads, no third-party analytics, and no tracking identifiers.

What we do collect

An anonymous identity. The app generates a random internal ID and a random display handle (like "Quiet Falcon") on your device. It is not linked to your name or contact details. If you delete the app, this identity is generally unrecoverable — that's by design.
What you post. Whispers (images and captions), comments, group names you create, direct messages, and images you attach to them are stored so the service can show them to the people you sent them to.
Approximate location, optionally. Only if you grant permission, and only as the ~1 km area described above. It powers the "miles away" display and the nearby feed. Decline and everything else still works.
A push notification token, if you allow notifications, so the service can deliver them.
If you email us (for example to request a beta invitation), we see your email address and use it only to reply.

Moderation

Every uploaded image is automatically reviewed by a moderation service (Sightengine) before it becomes visible to others — including images sent in direct messages. Content that other users report may additionally be reviewed by human moderators. This is how an anonymous space stays kind.

Who processes data on our behalf

Render — hosts our servers and database.
Cloudflare R2 — stores uploaded images.
Sightengine — automated image moderation.
Google Firebase — delivers push notifications.
Sentry — receives error reports from our servers, so we can fix what breaks. Reports are filtered to leave out what you write, your location, and your IP address.

These providers process data only to provide the service. We do not sell data to anyone.

Retention and deletion

You can delete everything yourself, in the app. Any individual whisper or comment can be deleted from its own screen, and "Delete everything" in the identity sheet permanently erases your identity and every whisper, comment, heart, and message it ever made — immediately and irreversibly. For anything else, email dan@morrione.net with your handle and the identity ID from the app's identity sheet (we have no other way to know which identity is yours — which is the point).

Age

Saturn1ne is not directed at children under 13, and you must meet the minimum age required by your jurisdiction to use it.

Changes

If this policy changes, the date above changes with it, and material changes will be noted in the app or on this site.

Terms

The terms of use sit alongside this policy.

Contact

dan@morrione.net