Privacy notice
Version 2026-10-29-draft. Last updated 29 October 2026.
REUBEN GBARINAA runs NoSignature. This notice explains what we collect and why, in plain words. Contact: HELLO@nosignature.reubengbarinaa.com.
The short version
- People who send messages do not need an account, name, email or phone number.
- No name is attached to a message. Other users cannot see who sent it.
- We are not anonymous to ourselves. To fight abuse we keep a few technical details about each sent message for 7 days, including your IP address in locked (encrypted) form. Our staff tools show only part of the IP, only for reported messages, and every look is logged. No tool in our app unlocks the full IP, but a person who holds both our database and our encryption key could.
- We do not promise anonymity from the people who run NoSignature, from our hosting provider, or against a lawful order.
- You must be 18 or older.
What we collect
| Data | Why | Who can see it | How long |
|---|---|---|---|
| Account: email, a salted hash of your password, sign-up and last login time, your 18+ and terms confirmation | To run your account and keep it secure | You. Support staff can search by email. | Until you delete your account |
| Sign-in sessions: a hashed session token, the start time, and the first part of your browser's description | To keep you signed in and let you sign out everywhere | You | 30 days, or until you sign out |
| Messages you receive: the text, when it arrived, and what you did with it (read, starred, archived, deleted) | To deliver your inbox | You. Moderators, admins and the founder can read it, with your report reason, only after you report it. | Until you delete it. Deleted messages are kept 30 days so you can undo, then removed. Deleting an inbox or your account removes them straight away. |
| Game responses: the text or the choice, and when it was sent | To run your games | You | Until you delete it or the game. Deleted responses are removed after 30 days. |
| Technical details of a sent message: a masked and an encrypted IP address, an approximate country, device type, operating system and browser. We do not collect these for game responses. | To investigate abuse such as threats | Founder and admin roles can look at one reported message's details, only with a written reason. This still works if you delete the message after reporting it. The IP is shown with part of it hidden. Each look is logged. The full IP is kept locked, and no tool in our app unlocks it. Analysts see only grouped totals, with small groups hidden. | 7 days, then deleted automatically |
| Abuse counters: a count of recent requests, keyed by a one-way hash of your IP address (or of your email when you sign in), mixed with a secret | To block flooding and bots | Not viewed by staff | About 1 to 2 days |
| Product counts: events such as a page viewed, a message sent or a game finished. They hold no names, no IP address and no message text. | To see if the service works and is used | Analysts and admins, as totals | 365 days |
| Replies an inbox owner publishes: the text they chose after their own edits (which can include a sender's words, with details they hide), and the theme | Only if you press Publish, to show your reply card at a public link | Anyone with the link | Until you remove it |
| Password reset requests: a one-way hash of the reset link and when it expires. An email is sent only if email is switched on. | To let you back into your account | Not viewed by staff | 60 minutes |
| Reports and support requests from the public: the type of problem, the link, game or card reported, up to 500 characters for a report or 1000 for a support request, and an email address only if you give one. No IP address is stored. | To review abuse reports and answer support requests | Moderators see reports without the email. Founder, admin and support staff see support requests and emails. Each look is logged. | 90 days after a request is closed. An open support request is kept at most 365 days and an open report at most 180 days |
| Page counters: how many times a page was opened on a day. They hold no visitor data. | To see if the service is used | Analysts and admins, as totals | 400 days |
| Owner activity: which days a signed in account was used | To count active owners and how many come back | Analysts and admins, as totals | 400 days |
| Staff action log: who did what and when, for example a suspension or a report review. Every sender-detail lookup, with its written reason, is kept in a separate log. Searching accounts and viewing totals is not logged. | Security and accountability | Founder and admin roles | A fixed period is still being decided |
| Notifications: a short title such as "New message in Main", the time, and whether you read it. Titles never contain message text. Bursts are folded into one entry with a count. | To show you what is new | You | 60 days |
| Notification settings: what you want to hear about, quiet hours, your time zone offset, and a pause setting | To follow your choices | You | With your account |
| Browser notification address (only if you turn it on): the web address your browser's push service gave this device. We store no keys and no content. | To send a plain alert that you have something new | Not viewed by staff | Until you turn it off, sign out on that device, delete your account, or the push service says the device is gone |
| Email confirmation (only if email is switched on): a one-way hash of a confirmation link, and the time you confirmed | To make sure the address is yours before we email it | Not viewed by staff | The link works for 24 hours |
| Other account details: the reasons you give when you report a message, a record of what you do with each message, the time you last used a session, and your 18+ and terms confirmation with its version. Staff can also store an encrypted authenticator secret. | To run reports, undo actions and prove consent | You, and staff as described above | With your account, or with the message |
Cookies and similar storage
If you sign in, we set one cookie to keep you signed in. It is needed for the service to work. If you only send a message or play a game, we do not set a cookie. We run a bot check from Cloudflare (Turnstile) on sending forms, and Cloudflare may use its own storage for that. We do not use advertising or cross-site tracking, and we do not fingerprint devices.
Optional analytics
We do not currently run optional visitor analytics. If we add it, it will ask for your consent first, and you will still be able to send messages if you say no.
Who else handles data
Our service runs on Cloudflare, which stores and processes data for us in countries outside Ghana. Cloudflare also runs our bot check, and sees your IP address when you send a message. Email notifications are switched off for now. If we turn them on, we will name our email provider here before we do. Browser notifications are switched off for now. We may share information if the law requires it. The technical details we hold about senders are limited and expire after 7 days.
Your choices
- See and download your data: Settings, then Download my data. If something you expect is missing, write to HELLO@nosignature.reubengbarinaa.com and we will send it.
- Delete your account: Settings, then Delete account. This removes your inboxes, messages, games, published replies, notifications and browser notification addresses.
- Delete single messages, games, inboxes or published replies at any time.
- Ask us to correct data or answer a question: write to HELLO@nosignature.reubengbarinaa.com.
Staff who can read messages
Our staff tools do not let anyone browse your inbox. A moderator can read a message only after you report it. Messages are stored on our servers as readable text, so a person who runs our database could read them. Staff accounts need a second sign-in step.
Ghana law
We aim to handle personal data in line with Ghana's Data Protection Act, 2012 (Act 843). This notice has not yet been confirmed by a lawyer, and nothing here is a guarantee of legal compliance.