Privacy, in plain words.
Last updated August 2026. This is the actual, honest description of what this app does with your data — not a boilerplate legal wall. It's not a substitute for legal advice in your jurisdiction.
The short version
What we collect
Text you submit to be roasted— stored only under your own private result link (nobsmirror.app/r/...), never searchable, never indexed by Google or any search engine, never shown to anyone who doesn't have that exact link. A separate, fully anonymized copy (just a 1–10 score, a mode, and a few flags — never the text itself) feeds an aggregate "BS Index" dataset.
Your email — only if you sign the pledge or buy a certification. We confirm you actually own that inbox with a one-click link before we email anything else to it. Your email is never shown on any public page, including your own pledge verification page.
Wall posts — screened by an automated check before publishing specifically to strip real names and company names before anything goes live. Nothing you write to the Wall is tied to your identity.
A hashed version of your IP address — used only to stop spam and rate-limit abuse (e.g. one Wall post vote per person per post). The hash can't be reversed back into your actual IP.
What we don't do
We don't let search engines crawl or index any page that contains your submitted text or your name (see /robots.txt) — those pages exist so you can share a link with someone specific, not so they show up in a Google search for your name.
We don't sell, rent, or share your email or submitted text with advertisers or data brokers. The only outside services involved are the ones that make the product work: Anthropic (to generate your roast), Stripe (to process a certification payment — your card details never touch our servers), Resend (to deliver email), and Discord (to run the community, via single-use invites that expire in 24 hours).
How it's secured
Every table in our database has row-level security turned on with zero public access rules — meaning even if our public API key ever leaked, it couldn't read or write a single row. All real database access happens through our own server, using a private key that's never shipped to any browser.
Submissions, Wall posts, and votes are all rate-limited to prevent abuse. Payment processing happens entirely on Stripe's own hosted checkout page — we never see or store your card number.
Deletion & requests
Want your pledge, certification, or a saved result removed? Email hello@nobsmirror.app and we'll take it down. We don't yet have a self-serve delete button — that's on the roadmap — but every request is handled by an actual person, promptly.