Privacy Notice
Controller
Shhhs is operated by GMF Uruguay, with address 21 de Setiembre, Montevideo, Uruguay. Privacy requests: privacy@shhhs.net.
Information we may process
No named account is required to create or open free ephemeral content. Depending on use, Shhhs may process content submitted by users, access-token and expiration state, technical and security metadata, limited purchase or subscription information received from Paddle, and information voluntarily sent to support, legal, privacy, or security.
Purposes
We process information to provide and secure the service, apply expiration and access rules, prevent fraud and abuse, administer purchases and subscriptions, respond to requests, enforce Terms, and comply with law.
Service providers
Cloudflare provides hosting, delivery, storage, and security infrastructure. Paddle acts as Merchant of Record and processes buyer, payment, tax, receipt, refund, and chargeback information. Cloudflare Email may be used for transactional email delivery when email delivery is enabled.
Retention
Ephemeral content is retained according to the expiration, access, or deletion condition selected or displayed when it is created. Secret TTL can be up to 168 hours for supported paid plans. Technical metadata retention target is 90 days. Support message retention target is 365 days. Billing metadata retention target is 2555 days.
Your rights
Where applicable, you may request access, correction, deletion, restriction, or a copy of personal data reasonably linked to you. Contact privacy@shhhs.net. Do not send secret content or full access tokens.
Security and changes
We use reasonable safeguards, but no Internet service can guarantee absolute security. We do not use secret content for advertising or AI training. The effective date identifies the current version.