What we keep, and why.

poopify is a community with public browsing and membership by request for sharing YouTube videos, and the moments in them worth talking about. We keep as little as we can. Effective 20 October 2026.

What we collect

From Google sign-in: your name, your email address, whether Google has verified that email, and Google's ID for your account. We ask Google for nothing else: no access to your Gmail, contacts, files or anything you do elsewhere.
From email and password sign-in, when enabled: Supabase Auth processes your email, password and ownership checks. Our server forwards your password for verification without keeping it; Supabase keeps the password hash. We keep your provider account ID, verified email, security revision and short-lived setup or recovery records. Hashed email and network-address keys limit repeated attempts. We send one-time setup and recovery emails when requested.
What you add: your access request, drafts (private to you), the moments you publish and the topic each is in, transcripts you paste, the topics you join, the members you follow, your comments and your votes, your direct messages and message requests, who you let message you, the members you block, the reports you send, and a profile picture, banner and post cover pictures if you upload them.
A sign-in cookie: one cookie that keeps you signed in. Each visit keeps you signed in for another 5 days; if you're away longer than that, you'll need to sign in again. We keep the time of your last visit only for that, and delete it after your sign-in has ended (it leaves our backups within 30 days). It is needed for the site to work. We use no advertising or analytics cookies.

What we don't do

We don't sell, rent or trade your information, and we don't show ads.
We don't use analytics or tracking scripts, and we don't keep logs of your visits.
We send requested sign-in setup and password recovery emails. We do not send marketing email.

Who can see what

Anyone, including visitors who are not signed in, can see published videos and clips, their topics, visible comments, displayed names and usernames, and vote totals. Drafts, account details, member profiles and uploaded pictures are not part of the public feed.
A transcript you paste into a draft is visible only to you. Once the post is published, its transcript is visible only to signed-in members. Visitors cannot read or search it.
Members see how many members follow each member, and how many members have joined each topic. They never see a list of who joined a topic; which topics you joined is shown only to you. In a topic with very few members, a count can still hint at who joined.
Hosts see members' names, and the names and emails of people asking to join, so they can decide who gets in.
If you report a post, comment or message, the hosts see what you reported, your reason and note, and that it was you. The person you reported is never told who reported them, but a message has only one possible reporter, so its sender may guess.
Your drafts are visible only to you.
Your direct messages are visible only to you and the person you're talking to, unless that person reports one of your messages (more below).

Direct messages

Messages are stored on our server as plain text. In the app, only you and the person you're talking to can see them: hosts and other members can't. The one exception is a report: if the person you sent a message to reports it, the hosts see a copy of that one message and who sent it, never the rest of the conversation. That copy is kept while the report is open, even if you delete the message, and is cleared 30 days after a host closes the report. It leaves our backups within 30 days after that. The person who runs the server can technically read them. When you delete a message, its text and any clip are removed from our live database right away, and from our backups, including an off-site copy, within 30 days. A record that a message was sent (from whom, to whom and when) stays, without what it said. If a host removes someone, your conversation with them stays readable to you.

Who can message you

By default, any member can send you a message request. This now applies to every member, including those who joined before 8 October 2026, when only people who followed each other could message. People you both follow, people whose request you accepted, and people you already have a chat with message you directly in Chats; unfollowing someone doesn't end a chat. That includes a chat you ended by unfollowing before 8 October 2026: it can resume unless you block them or choose Nobody. Anyone else can send you one message first: up to 300 characters, with any shared clip shown only by its title. It waits under Messages → Requests until you accept, decline or block, it doesn't add to your unread count, and opening it doesn't tell the sender. A request never gives anyone access to your other messages.

Accept lets you both message freely until one of you blocks the other or chooses Nobody.
Decline is silent. Whatever you do, the sender only ever sees “Request sent”. They can send you one request every 30 days, and a request you don't answer is hidden after 30 days.
Block stops messages both ways and declines any request between you. They aren't notified.
Your setting: Everyone (the default), Following (only people you follow can send you requests), Mutuals (only people you both follow can message you, with no new requests) or Nobody (messages off: your chats become read-only for both of you). Under Everyone, Following or Mutuals, people you already have a chat with (including anyone whose request you accepted) can keep messaging you; choose Nobody or block them to stop it. Only you see it, and we never change a setting you chose.
Limits: each member can send up to 10 new requests a day and have up to 20 waiting (3 a day and 5 waiting in their first week), on top of the usual 20 messages a minute and 300 a day.
Hosts follow the same settings and limits as everyone else; their requests are marked “host”. They still can't read your messages.

What others can tell: the Message button now shows on most profiles, so if it disappears for someone, they may guess you changed your setting or blocked them (or that they're waiting out the 30 days). Which conversations land straight in Chats still shows who follows whom back, and a sender can tell when you accept.

To have the messages you sent deleted along with your account, email us (see "Your choices" below). We handle deletion requests by hand.

Reports and deleting posts

Hosts can hide a post or comment that was reported: nobody else sees it, and its author sees it marked “Hidden by a host”. Hosts can also send its author a short note, which only that member sees, or remove a member, whose posts are then hidden until they're invited back. Hosts keep a record of what they did (who, what and when). When you delete a post, it disappears from poopify for everyone, hosts included. We keep a record of it on our server; to have it erased as well, ask us (see “Your choices”). Comments and votes others left on it are hidden with it.

You can remove a transcript from your post without deleting the post; a host can remove it too. Deleting your post also removes its transcript. The text leaves the live database immediately and retained backups within 30 days. An account deletion request also removes stored transcript text.

Profile pictures

You can upload a profile picture and a banner. We don't keep the file you upload: our server makes a new copy with the location, camera details and any other metadata removed, and stores only that copy. Your pictures are visible only to signed-in members, beside your name and on your channel. When you replace a picture or switch to a preset, or when a host removes you from poopify, we delete it from our server, and it drops out of our nightly backups within 30 days.

You can also add a cover picture to your own post, made the same way. Signed-in members see it in place of the YouTube thumbnail; visitors who aren't signed in still see YouTube's. When you change or remove it, a host removes it, a host removes you, or your account is deleted, we delete it from our server, and it drops out of our nightly backups within 30 days. A post you delete keeps its cover with the post's record until you ask us to erase it.

YouTube

Moments are YouTube videos. When a page shows a video thumbnail or you play a video, your browser loads it from YouTube, which is run by Google. Google's own privacy policy applies to that: policies.google.com/privacy.

poopify does not fetch transcripts from YouTube. A member pastes the text, and transcript search runs in your browser.

Where it's kept

Your information is stored on a private server we run, and backed up nightly. Backups are kept for up to 30 days and then deleted.

Email sign-in services

When you choose email and password, Supabase Auth and Resend, our email delivery provider, process the account and delivery information needed for setup and recovery. Your posts and membership records stay on our server. Account deletion includes a separate deletion of the linked Supabase identity. Provider service logs and backups follow their retention policies.

Google user data

poopify's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use your Google name, email and account ID only to sign you in, show your displayed name with your public posts and comments, and let hosts manage who can join.

Your choices

You can ask us to show you, correct or delete your information at any time. If you ask us to delete your account, we remove your account, requests, drafts, published moments, the messages and requests you sent, your message setting, the reports you sent, reports about what you posted (with any copy of your message) and host notes to you, and they drop out of backups within 30 days. What other members wrote stays: their comments, their replies to yours, and the messages they sent you. Where your name appeared beside it, it shows as “Deleted member”, and a comment of yours that someone replied to shows as “[deleted]”. We handle these requests by hand, by email. You can also remove poopify's access in your Google account settings.

Children

poopify is not meant for anyone under 13.

Changes and contact

If this policy changes, we'll update the date at the top. Questions or requests: emailbigtech@gmail.com.