Privacy Policy
Effective 22 August 2026
shottxt collects the minimum it needs to be a social network, and nothing to sell. This page says exactly what that means.
1. Who runs shottxt
shottxt.com is operated by Ahn (Seoul, South Korea). For anything in this policy, including requests to access or delete your data, write to shottxt0901@gmail.com.
2. What we collect
There are three sources, and that is all of them.
- From Google, when you sign in: your name, email address, profile picture URL, and the Google account identifier that lets us recognise you next time. We never receive your Google password.
- From you, as you use the site: posts, replies, reposts, likes, follows, reports you file, and anything you type into your profile (display name, handle, bio, location, website).
- Automatically, as a side effect of serving the site: our hosting provider records request logs containing IP addresses and user-agent strings, and we store rate-limiting counters keyed to your account so one person cannot flood the service.
3. What we do not collect
- No passwords. Google handles sign-in.
- No advertising or analytics trackers, no third-party pixels, no cross-site profiling.
- No contact list, location data, or device identifiers beyond what is in an ordinary HTTP request.
- No payment details — shottxt does not charge for anything.
4. Cookies
shottxt sets only the cookies it needs to work: a signed session cookie that keeps you logged in, and a CSRF token that prevents other sites from acting on your behalf. Both are set by the authentication layer, are strictly necessary, and expire when your session does. There are no analytics or advertising cookies to consent to.
5. Why we use it
We do not sell your data, rent it, or hand it to advertisers. We would only disclose it if legally compelled, and we would tell you unless the law forbids it.
- To run the service: show your posts to the people who follow you, deliver notifications, and let people find you by handle.
- To keep the service usable: rate limits and abuse reports exist to stop spam and harassment.
- To respond to you when you contact us.
6. What is public
shottxt is a public network. Your display name, handle, profile picture, bio, location, website, join date, posts, replies, reposts, likes, and your follower and following lists are visible to anyone, signed in or not, and are included in the site's sitemap so search engines can index them. Your email address is never shown to other users. Reports you file are private and are not shown to the person you reported.
7. Who else sees it
Running a website means other companies process data on our behalf. For shottxt those are the hosting provider that serves the site, the managed database provider that stores it, and Google, which handles sign-in. Each of them only processes what is needed to do its job.
8. How long we keep it
Your account and its content stay until you delete them. Rate-limiting counters expire within an hour. Deleting a post removes it, along with its replies, reposts and likes. Deleting your account removes your profile, posts, likes, follows, notifications and the link to your Google account. Backups and provider logs may retain copies for a short period before they roll over.
Moderation records are the one exception. When somebody reports a post or an account, we keep the report — the reason given, and a copy of the reported content as it stood at that moment — even after the post or account is removed, so there is a record of what was acted on and why. Those records no longer point at your account once it is deleted, and they are never public. Reports you filed yourself are deleted along with your account.
9. Your choices
If you are in a jurisdiction that grants you rights of access, rectification, erasure, portability or objection, this is how you exercise them, and you may also complain to your local data protection authority.
- Export: Settings → Account → Download your data gives you a JSON file with everything listed above.
- Correct: Settings → Edit profile changes your name, handle, bio, location and website at any time.
- Delete: Settings → Account → Delete account removes it permanently. There is no undo and no archive.
- Ask: if you would rather have a human do any of the above, or you want to know what we hold, email shottxt0901@gmail.com.
10. Age
shottxt is not for children. You must be at least 13 years old to hold an account, or older where your local law requires it. If we learn an account belongs to someone younger, we delete it.
11. Changes
If this policy changes in a way that matters, the effective date at the top changes and we will say so on the site before it takes effect.
Questions about this document? Write to shottxt0901@gmail.com.