Privacy Policy

• We collect what you give us to run an account (username, email, password) and whatever you put on your page.
• Your profile is public. Anything you add to it can be seen and copied by anyone with the link.
• We do not run advertising, we do not sell your information, and we do not embed third-party analytics or advertising trackers.
• Our view and click counters do not record visitors' IP addresses, browsers, or referring pages.
• You can delete your account yourself from your dashboard.

puff.bio ("we", "us") is an independently operated bio-link service. It is not affiliated with, endorsed by, or sponsored by Discord Inc., Roblox Corporation, or Cloudflare, Inc. For any privacy question or request, email [email protected].

Account information. Your username, email address, and password. Passwords are stored only as one-way bcrypt hashes: we never store the password itself and cannot recover it for you. We also record when your email was confirmed and account settings such as whether the optional sign-in code is on.

Content you create. Your display name, bio, links, dock buttons, uploaded images and audio, colour and layout choices, page metadata you write, and templates you save. We store this to display your page.

Counters. One view count per profile, and one row per link click. A click row records which link, which profile, and a timestamp. It does not record the visitor's IP address, browser, device, location, or referring page.

Sign-in and verification codes. We store a hashed copy of any code we email you and whether it was used. The code itself is only ever sent to your email address.

Moderation and security records. If someone reports your page, or a member of staff warns or bans an account, we keep a record of the report, its reason, and which staff member acted. Our administrative action log also records the IP address of the person who performed an administrative action, so staff actions can be audited.

Optional Discord link. If you connect Discord, we store your Discord user ID and handle. We ask Discord only to identify you, never for your email address. If you switch on presence, your Discord handle and live status are shown on your profile.

Your acceptance of our policies. When you create an account you record that you accepted these policies. We store the version you agreed to and the date, so we can show which text applied to you. This record is deleted with your account.

Username reservations. If you reserved a username before launch, we kept the username, email address, and a hashed password so the name was held for you.

• We do not use advertising networks or third-party analytics.
• We do not sell, rent, or trade your information, and we do not share it for cross-context behavioural advertising.
• We do not store visitors' IP addresses for ordinary page views. IP addresses are used in memory to rate-limit abuse, and are written to a record only for administrative actions as described above.
• We do not ask for your real name, postal address, phone number, or date of birth.
• We cannot see your password.

A profile at puff.bio/yourname is a public web page. Anyone can open it without an account, and it is designed to be shared and previewed on other sites.

• Your username, display name, bio, avatar, background, page colours, links, dock buttons, badges, audio track titles, and any page metadata you set are public.
• Your join date and a numeric member ID are public. If you turn on the information card, they appear on your page.
• If you enable the view counter, your view count is public and your page may appear on the public leaderboard. You can opt out of the leaderboard. Your click counts are never public — only you see them.
• If you publish a template, its title, description, style, and the display name, bio and avatar included in that style are visible to other signed-in users.
• Your email address is never shown publicly.

Treat anything public as permanent: people can screenshot, archive, or copy it before you remove it. Please do not put private information on a public profile.

We use a small number of first-party cookies. We do not use advertising or cross-site tracking cookies.

• Sign-in cookie — keeps you signed in. HTTP-only, SameSite=Lax, and Secure over HTTPS. Expires after 30 days.
• Saved-account cookie — if you sign into more than one puff.bio account in the same browser, this lets you switch between them. It holds up to five signed session tokens, is HTTP-only, and expires after 30 days. Signing out of an account removes it from the list.
• View-count cookie — set on a visitor so the same person is not counted twice within about six hours. It contains a short hash of the profile name, not your identity.
• Pre-launch passcode cookie — only during a private pre-launch period, so you are not asked for the passcode on every page. Expires after seven days.

Your browser also stores a local marker so a link is counted at most once per browsing session. Clearing cookies will simply sign you out.

• To create and operate your account, and keep you signed in.
• To publish and serve your page and its media.
• To send service email: verification codes, password reset codes, security notices, and moderation notices.
• To keep the service secure, prevent abuse, and fix problems.
• To review reports and enforce our Terms.
• To show you your own view and click statistics.

We may also send occasional service announcements to account holders, such as a material change to these policies. You can control product and marketing email from your account settings.

We do not sell your information. We use a small number of service providers that process it on our behalf:

• Cloudflare R2 — stores the images and audio you upload. Uploaded files are served from a public URL, so treat any file you upload as public.
• Resend — delivers our email. It receives the recipient address and the message contents, including codes. Resend also reports delivery events back to us (sent, delivered, opened, bounced, and so on) and we mirror those into the same private staff channel on Discord. That mirror carries the subject line, with any sign-in or verification code masked, and the delivery status. It does not carry your email address, and never the body of the message.
• Discord — only if you choose to connect it; Discord returns your identity to us when you authorise the link. Separately, when someone files a report we forward it to a private staff channel on Discord, including the reporting account's username, the reported account's username and page link, the reason, and any note the reporter typed. Reports are not anonymous to our staff.
• Lanyard — a public Discord presence service. If you turn on presence, we send your Discord ID to Lanyard to look up your status. We do not send your puff.bio email or username.
• Our hosting provider — hosts the site and its database.

We may also disclose information where we are legally required to, where we believe in good faith it is necessary to investigate illegal activity or protect someone's safety, or as part of a transfer of the service. We do not disclose it for anyone else's marketing.

If you put a link on your page, visiting it takes you to someone else's site, which has its own privacy practices. An image you load from another site is fetched by your browser, so that site can see your IP address.

There is no checkout today and we do not process payments or store card details. If paid features launch, this policy will be updated before any payment information is collected, and payment details will be handled by a payment processor rather than stored by us.

puff.bio is not for children under 13. We do not knowingly collect personal information from anyone under 13. Because we do not ask for a date of birth, we rely on you and, where required, your parent or guardian. If you believe a child under 13 has created an account, email [email protected] and we will delete the account and its content.

We keep account information while your account exists. You can delete your account from the Account tab of your dashboard, or by emailing us. Deletion removes your account, profile, links, docks, badges, audio entries, templates, counters, and warnings.

A few things are kept or handled separately:

• Uploaded files. Deleting a profile field, an audio track, or a template removes the file it pointed at. Deleting your whole account removes your database records and also deletes the files you uploaded — profile images, audio, custom icons, and the copies your templates kept. Removing a file from public storage can take a short while to propagate through caches, so a direct link may keep working briefly after deletion.
• Administrative log. Our audit log keeps the username and IP address associated with administrative actions so staff conduct can be reviewed. It is kept to protect the service and other users.
• Copies outside the database. Reports are also sent to a staff Discord channel, and email is delivered through our email provider. Those copies are subject to those services' own retention.
• Legal requirements. We may keep records longer where the law requires it, or where needed to resolve a dispute or prevent abuse.

We intend to delete link-click records once they are more than 180 days old. That deletion runs on a scheduled basis and can be delayed or missed if maintenance is interrupted, so a record may survive longer than 180 days. You can ask us to delete one sooner.

Passwords are hashed with bcrypt and never stored reversibly. Sessions use signed, HTTP-only cookies. Traffic is served over HTTPS. Uploads are restricted by file type and size. No system is perfectly secure, so please use a unique password and keep it to yourself.

If a breach affects your personal information, we will notify you and the relevant authorities as required by applicable law, including New York's breach-notification requirements, and we will tell you what was affected and what you should do.

You can edit or delete most of your content from your dashboard at any time, and you can delete your account yourself. You can also ask us to access, correct, or delete your information, or to stop emailing you, by writing to [email protected] from the address on your account. We may need to confirm you control the account before acting.

Depending on where you live, you may have additional rights over your personal information, including the right to know what we hold, to correct it, to delete it, to obtain a copy, and to appeal a refusal. We do not discriminate against you for exercising them. We do not sell personal information and we do not use it for targeted advertising, so there is nothing to opt out of in that sense.

We and our providers store and process information in the United States. If you use puff.bio from elsewhere, you are sending information to the United States, where privacy law may differ from your own.

We may update this policy as the service changes. We will change the date at the top, and if a change materially affects how we handle your information we will tell you on the site or by email before it takes effect. Continuing to use puff.bio after a change means you accept the updated policy.

Questions, requests, or complaints: [email protected]. If you are asking about a specific account, write from the email address on that account so we can verify it. See also our Terms of Service and the account recovery page.