Privacy

What we don't collect

• No email address or phone number. Accounts don't have one.
• No password. Sign-in uses passkeys, and the secret never leaves your device.
• No analytics cookies and no cross-site tracking. We use Cloudflare Web Analytics, which is cookieless and aggregate, to measure traffic and page speed.
• The one exception to "no third parties" is the ad provider. See Ads below.

What we store

• A random account ID, and a display name if you choose one.
• Your comments, votes and saved discussions. That's the product.
• A short list of recently viewed discussions, so the history page works. It's capped and only visible to you.
• If you add a passkey: its public key. The private half stays in your device's keychain.

Deleting things

You can delete any comment you wrote. Comments without replies are removed outright; a comment with replies leaves a blank "[deleted]" placeholder so the thread below it still makes sense.

You can also delete your whole account from the account page. Your name, sign-in credentials, votes, saved discussions and history are erased immediately. Your comments stay up by default, attributed to "[deleted account]", or check one box to remove them too, which erases the account entirely.

Who we share it with

We don't sell your data and we don't share it for advertising or marketing. The ad provider described in Ads below is involved, and it never receives your account data. We use a hosting provider (Cloudflare) to run the service, which also provides the cookieless analytics described above, and we may disclose information if the law genuinely requires it.

How long we keep it

Your account and its content stay until you delete them. Recently-viewed history is capped and rolls over automatically. When you delete your account, its data is erased right away as described above.

Children

Comment-On isn't directed at children. You must be at least 13, or the minimum age for online services where you live if it's higher.

Ads

Hosting costs money, so pages show a single ad served by Google AdSense. We request non-personalized (contextual) ads only. Ads are chosen from the page's content, never from a profile of your behavior, so we don't rely on tracking you to show them. Google's script still runs on ad-supported pages and may use cookies or device signals (e.g. for frequency capping and fraud prevention) as described in Google's partner-sites policy. Where consent is required (e.g. the EU), you'll be asked first. We never hand the ad provider your account data; it doesn't know who you are here, only that a page was viewed.

A note on scale

Comment-On is a small independent project, not a company with a legal department. This page is a plain-language description of how it actually works, and it will be kept accurate as the project evolves. Questions about privacy? Email mail@comment-on.com.