We care deeply about protecting your private information. It's literally our only job, and we strive to do it well.
Data we collect
Unsurprisingly, we collect the secret messages you submit to us. While we don't use cookies, we do log IP addresses to monitor usage and prevent abuse.
How we collect data
When you share a secret message with us, we use SSL to encrypt and securely transfer your data directly to our servers.
How we protect data
When we receive a message submission, we immediately secure it with AES-256 (a.k.a. 'military-grade') encryption using a randomly generated symmetric key and initialization vector for each message. Your secret message is never written into our server logs, and we never write unencrypted messages to our databases. We embed the key in the provided url and don't store keys in our databases for www.pooflinks.com and any of our browser extensions. When interacting with intermediary applications (e.g. Slack) that use the Poof API to generate secure messages for users, we withhold and store half of a key as a security precaution.
To keep your secret as safe as possible, never reveal the URL to anyone other than the intended recipient. If you lose your URL, we cannot retrieve your secret for you.
How we manage data
Your data stays on our servers - we don't sell or lease your data to any third party. A secret message can only be retrieved within the window of time specified by the submitting party, up to a maximum of 7 days, and secrets that have not been retrieved within the designated window are considered 'expired'. Secrets are wiped from our servers once viewed, and secrets that expire are immediately inaccessible and are permanently removed from our database within two (2) minutes of their expiration.
How you can control your data
If you want a secret immediately removed from our servers, either (1) use the 'Destroy Link' button visible immediately after a secure link is created on www.pooflinks.com, or (2) view the message. Once either of these things happens, the message can no longer be retrieved and is permanently removed from our servers.
If you have any further questions, please feel free to contact us at privacy@pooflinks.com.