Privacy

What we don't collect

• No email address or phone number — accounts don't have one.
• No password — sign-in uses passkeys, and the secret never leaves your device.
• No ad trackers or analytics scripts.

What we store

• A random account ID, and a display name if you choose one.
• Your comments, votes and saved discussions — that's the product.
• A short list of recently viewed discussions, so the history page works. It's capped and only visible to you.
• If you add a passkey: its public key. The private half stays in your device's keychain.

Deleting things

You can delete any comment you wrote. Comments without replies are removed outright; a comment with replies leaves a blank "[deleted]" placeholder so the thread below it still makes sense.

You can also delete your whole account from the account page. Your name, sign-in credentials, votes, saved discussions and history are erased immediately. Your comments stay up by default, attributed to "[deleted account]" — or check one box to remove them too, which erases the account entirely.

A note on scale

Comment-On is a small independent project, not a company with a legal department. This page is a plain-language description of how it actually works, and it will be kept accurate as the project evolves.