1. Who we are
tlkt.me is an anonymous messaging platform that lets people create tags with unique QR codes and links so anyone can send them anonymous messages. This Privacy Policy explains what data we collect, why, and your rights regarding that data.
2. Data we collect
Account data
When you create an account we collect your email address and a hashed password. We never store plaintext passwords.
Messages & conversations
Messages sent through tags are stored so that owners and visitors can continue conversations. Visitors do not need to create an account. If a visitor chooses to provide an email address for reply notifications, that address is stored alongside the conversation.
Images
Tag photos and message attachments are uploaded to Cloudflare R2 (S3-compatible object storage). Files are referenced by randomly generated keys and are not publicly listed.
Analytics
We use PostHog for product analytics. PostHog is loaded only after you consent via our cookie banner. When opted in, PostHog may collect anonymised usage data such as page views and feature interactions. No data is sent to PostHog if you decline cookies.
Server logs
Our hosting provider may collect standard server logs (IP address, user agent, timestamps). These are retained for operational and security purposes and are automatically deleted.
3. How we use your data
- Deliver and operate the messaging service
- Send transactional emails (password resets, message notifications)
- Improve the product through anonymised analytics (with consent)
- Prevent abuse and maintain security
4. Third-party services
| Service | Purpose | Data shared |
|---|---|---|
| Cloudflare R2 | Image storage | Uploaded files |
| Resend | Transactional email | Email address, message content |
| PostHog | Analytics (with consent) | Anonymised usage data |
We do not sell your data to any third party.
5. Cookies
We use a cookie consent banner. If you accept, PostHog may set cookies for analytics purposes. If you decline, no analytics cookies are set. A cookie-consent key in localStorage records your preference.
Essential cookies (e.g. session authentication) are used to operate the service and do not require consent.
6. Data retention
Account data, tags, and conversations are retained as long as your account exists. When you delete your account, all associated data (tags, conversations, messages, attachments) is permanently deleted.
7. Your rights (GDPR)
If you are in the EU/EEA, you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data
- Restriction — limit how we process your data
- Portability — receive your data in a portable format
- Object — object to processing based on legitimate interests
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Data deletion
You can delete your account and all associated data at any time from your profile settings. Alternatively, email [email protected] and we will process your request within 30 days.
9. Children
tlkt.me is not intended for children under 16 years of age. We do not knowingly collect data from children under 16.
10. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email or a notice on the site.
11. Contact
For privacy-related questions or requests, contact us at [email protected].