Privacy Policy

totell.com ("totell", "we", "us") is an anonymous constructive-feedback service operated by Totell Inc., a Delaware corporation. This policy explains what we collect, why, and the choices you have.

What we collect

Account holders: your name, username, email address, optional password (stored only as a secure hash), and an avatar you choose. We also collect your birth month and year, only to enforce the minimum age of 16; we deliberately do not collect the day, and we record when you made the declaration. If you sign in with Google we receive your name and email from Google. If you sign in with Snapchat we receive a Snapchat identifier and display name; Snapchat does not share your email with us.

Feedback senders: you do not need an account to send feedback. We store the message you write and the card style and traits you pick. To prevent abuse we store a coarse, one-way fingerprint derived from your network connection. We do not store your name, account, or exact address with a message, and we designed the product so a message cannot be traced back to a specific person by its recipient.

Premium name claims: if you reserve a premium username we collect the email address you provide to complete the purchase. Card details go directly to our payment processor (Stripe) and never touch our servers.

How messages are processed

Anonymous cards, sealed messages, and public feed posts and replies are screened by an automated AI system before delivery or publication to filter insults, harassment, and unsafe content. Images are screened before they are stored; video uploads are not accepted at the moment. Text and images are sent to our AI processing providers (hosted on Microsoft Azure) solely for this screening and are not used by us to train AI models.

Private messages between accounts are not AI screened. Instead, a first message from someone you have no relationship with arrives as a message request: nobody can put a message in front of you without your agreement, and declining is never revealed to the sender.

Anonymity, honestly stated

Recipients never see who sent a message. Inboxes unlock only after several messages arrive, ordering is shuffled, and exact timestamps are hidden. Like any service, we may be required to disclose information we hold in response to valid legal process; we hold very little about senders by design.

What we do not do

We do not sell your personal information. We do not show third-party advertising. We do not share your data with third parties except the service providers who run our infrastructure (Microsoft Azure hosting and AI, Stripe for payments, and our email delivery provider) under contracts limiting their use of it.

Cookies

We use a single first-party session cookie to keep you signed in, and short-lived cookies to secure sign-in flows. No tracking cookies.

Your rights

You can access and update your account details in Settings at any time. You can ask us to delete your account and its data, or to export it, by emailing hello@totell.com. We honor applicable rights under GDPR, CCPA, and similar laws.

Age

You must be at least 16 to hold a totell account, and we enforce this with the birth month and year collected at signup. totell is not directed to children, and we do not knowingly collect data from anyone under 16. If you believe someone under 16 uses totell, contact us and we will delete the account.

Data retention and security

Data is stored on Microsoft Azure in the United States, encrypted in transit and at rest. We keep account data while your account exists and delete it on request. Abuse-prevention fingerprints are periodically purged.

Changes and contact

We will post any changes to this policy here with a new effective date. Questions: hello@totell.com or our support page.