Privacy policy.

This site is built around not knowing who you are. There are no user accounts, and nothing you write or report here is ever tied to your identity. We use two measurement tools — Meta's ad pixel to learn whether our ads work, and PostHog to understand how the site gets used so we can improve it. Neither ever sees your pay figures, your posts, or who you are. Anonymity isn't a setting here — it's the architecture.

• An anonymous device ID. Your browser generates a random identifier and keeps it in its own local storage. It powers vote toggles, report deduplication, rate limits, and your ability to delete your own posts. It is random — it contains nothing about you, and we cannot connect it to a person. It is never shown publicly and is sealed off from every public and admin interface.
• What you submit. Posts, replies, votes, reports, and pay reports (role, optional state, pay figure) are stored without any identity attached — just the anonymous device ID above.
• An optional, encrypted email. If you ask for a ping when your post gets replies, that address is encrypted before it's stored, is never displayed anywhere (including to us in any dashboard), is used only to send those pings, and is deleted automatically when your post is deleted. Every ping includes a one-click unsubscribe that erases it immediately.
• Episode-notification emails. If you signed up for episode emails in the past, we hold that address for that purpose only. We don't sell or share it.

We run ads on Instagram and Facebook to grow this community, and we use Meta's Pixel and Conversions API to know whether those ads work. Here's the honest breakdown.

What Meta receives: standard device signals (IP address, browser type) and the fact that certain actions happened — a page was viewed, the pay form was opened, a report was submitted, an episode was played. For pay reports, Meta learns only the role and track selected — never the pay figure. For Off the Record, Meta learns a post was made — never a word of what it says.

What Meta never receives: your pay numbers, your post or reply text, your anonymous device ID, your notification email, or anything else you'd expect us to protect.

PostHog is product analytics, not advertising: it records anonymous usage — pages, clicks, player activity — under a random ID, and none of it is shared beyond PostHog's processing of it for us.

Your opt-out: browser ad blockers and privacy modes block the Meta pixel, and the site works identically without it. You can also limit ad tracking in your Meta ad settings.

• No accounts or sign-in for the community.
• No ad networks on the site — we buy ads elsewhere; we don't show them here or sell your attention.
• Two measurement tools (Meta and PostHog, described above) and nothing else — no data brokers, no fingerprinting.
• No selling of any data, to anyone. The only sharing is the ad measurement above.
• No attempts to connect anonymous content to real identities.

The site runs on Vercel with data stored in Supabase (Postgres); notification emails are delivered via Resend. Like nearly all web infrastructure, these providers process standard technical request data (such as IP addresses in transient server logs) to operate the service. We don't use that data to identify community contributors. To keep bots and spam out, we briefly retain a salted, one-way hash of request addresses — never the address itself — and automatically delete these within about 48 hours. Ad measurement data goes to Meta as described above; Meta acts under its own privacy policy for that data.

Delete your own posts and replies anytime from the browser you wrote them in — deletion is permanent and cascades to everything attached, including any notification email. Clearing your browser's site data resets your anonymous ID entirely. Unsubscribe links appear in every email we send.

If our practices change, this page changes first, with the date above updated. Questions? Reach us on Instagram @_beyondthescan.