Privacy.

We use a random session cookie and internal identifiers to remember your session, protect access and prevent abuse. We keep age confirmation, consent, moderation results, Key balances, exchange activity and safety records needed to run the service.

When you submit, we process the text for safety, quality and exchange delivery. An unsent draft stays in the page’s memory. Closing or reloading the page can lose it.

We record limited visit, source, campaign and referral information to understand how people find and use TwoKnow. Browser session storage supports page navigation and a separate measurement identifier that resets each UTC day. Visit and button measurements contain only a daily identifier, fixed page and event names, and timestamps. Daily maintenance deletes identifier-level measurement rows once their UTC date is more than 30 days old, and operational daily totals once their date is more than 90 days old. Secret text and claim credentials are excluded from analytics and ordinary logs.

No email signup or notification list is offered. If you contact support, we receive the address and information you choose to send.

Cloudflare hosts TwoKnow and processes stored data and connection information, including IP addresses, for delivery and security. OpenAI receives submitted text for AI safety and quality checks. Service providers’ technical records mean anonymity here is not a promise of untraceability.

We do not sell personal information or use advertising trackers. Cloudflare provides site measurement and security services. Browser Do Not Track signals do not change our session, security or site measurement behavior.

See Cloudflare’s privacy policy and OpenAI’s privacy policy for their practices. Information may also be disclosed when required by applicable law or to address a safety incident.

External sharing is off. “Let it travel” requires your separate opt-in, safety review and approval of the exact final preview.

A secret leaves the exchange after two strangers hear it. Restricted copies and safety or security records may remain. This does not mean every copy is erased.

Automatic source deletion and a self-service deletion control are not available in the current limited trial. To request access, a correction, deletion or withdrawal of an optional consent, contact hello@twoknow.me. Do not include secret text or access credentials in email.

We may need proof linking a request to your session. We may be unable to locate an anonymous record without it. A safety or legal hold may limit deletion; we cannot promise a fixed deletion date.

Effective October 11, 2026. We post material policy changes on this page with an updated effective date. Revisit this notice before submitting.

Privacy questions: hello@twoknow.me.