Privacy Policy
Last updated: October 2026
Your data is yours. We do not sell it, share it with advertisers, or use it to build profiles for third parties. This policy explains what we collect, why we collect it, who else touches it, and what control you have over it.
We respect your privacy — and we also have a responsibility to protect our members. That means privacy here isn't absolute: it doesn't extend to someone using unmaskd. to harm others. The exceptions are covered below, and they're narrower than they might sound.
What we collect
We collect only what is needed to run the platform:
- Profile information: display name, age (optional), general location (optional), bio (optional), photos (optional), optional profile signals (e.g. open to collaborating), interests, communication styles, support needs, ND identifiers, collaboration roles
- Account credentials: email address and a hashed password (we never store your password in plain text)
- Messages and connection activity: messages you send through the platform, and connection/circle activity, are stored to deliver them and maintain your history
- Safety reports and moderation records: reports you file, reports filed about you, and related moderation actions are kept — even if an account involved is later deleted — to enforce our Acceptable Use Policy and keep the community safe
- Payment information: if you make an optional support contribution, our payment processor (Stripe) handles your card details directly — we receive limited metadata such as the amount and payment status, never your full card number
- Device and security logs: browser type, OS version, IP address, and login/authentication activity, used for compatibility, bug reporting, and detecting fraud or abuse — not for tracking or advertising
- Cookies: a session cookie to keep you logged in. We do not use advertising or cross-site tracking cookies, and we do not run third-party analytics on unmaskd today
What you control
Your profile has granular visibility controls:
- ND identifiers: you choose whether these are shown publicly, shown only to connections, or hidden entirely
- Support needs: same controls — you decide who sees them
- Communication styles: shown or hidden at your discretion
- Location: if provided, only a general area (city or region) is ever shown — never an exact address or coordinates
- Photos: all photos you upload can be removed at any time; removal is immediate
What we will never do
- Sell your data to third parties
- Share your data with advertisers
- Use your neurodivergent identifiers or support needs for ad targeting
- Show ads on this platform
- Use your data to train AI models without explicit, separate opt-in consent
- Store support-sensitive information in browser caches accessible offline
- Share your messages with anyone other than the intended recipient — outside of the limited safety and legal situations described below
Service providers
We use a small number of service providers to operate unmaskd, and only share what each one needs to do its job:
- Payment processing: Stripe, for optional support contributions
- Hosting and cloud storage: to run the platform and store photos/media
- Email delivery: to send account, safety, and transactional emails
- Moderation tooling: to help review reports and enforce the Acceptable Use Policy
These providers only receive the data necessary to provide their service to us, and are not permitted to use it for their own advertising or profiling purposes.
Law enforcement and legal requests
We may disclose account information in response to valid legal process, or where we reasonably believe disclosure is necessary to prevent imminent harm. See our Law Enforcement Requests page for details on how these requests are handled.
Data boundaries
Profile data is separated into two layers:
- Public profile data — information visible to other users according to your visibility settings: display name, bio, interests, and any profile sections you have set to public
- Private account data — email address, exact age, full message history; never shown to other users
These two data types are stored and returned through separate code paths. A bug that leaks public profile data cannot also leak private account data.
Deactivating your account
Deactivating is reversible and separate from deletion. From Account Settings, you can deactivate your account to hide your profile and pause new connection requests and messages, without deleting anything. Your data — profile, messages, connections — is kept until you come back. Signing back in shows you a reactivation prompt; nothing is restored automatically without you confirming it. Deactivating never deletes your account; to remove it, use Delete account, described below.
Deleting your account
You can request account deletion at any time from Settings → Account settings. Your account is hidden immediately and remains recoverable for 30 days: sign in during that window and explicitly choose Restore my account if you change your mind. After 30 days, your profile, messages, photos, and account credentials are permanently deleted, and this cannot be undone. If something you were involved in is still under active review, like an open safety report, we keep what's needed for that a little longer. Anonymised aggregate data (e.g. "X% of users are interested in music") may be retained but cannot be linked back to you. See Delete Your Account for the full walkthrough.
empower. by unmaskd
empower. by unmaskd (empower.getunmaskd.com) is run by the same operator as unmaskd. and is covered by this policy. It keeps its own records, separate from unmaskd.
What empower. stores
- Your account: email address, password (stored as a one-way hash), display name, and sign-in attempts.
- A talent profile, if you create one: headline, introduction, location, opportunity preferences, capabilities, portfolio items and links, background entries, working preferences, communication notes, an optional photo, and which sections you show.
- A company profile, if you create one: company details and an optional logo.
- Activity: introduction requests and their notes, messages, reports, blocks, saved candidates, saved searches and recent searches.
- Reading preferences (font, text size, theme) stay on your device.
empower. does not store support or accommodation needs. If you type them while editing, they stay in your browser and are never saved.
Who can see it
- Nothing on a talent profile is visible until you publish it. Once published, the sections you choose are visible to other people who can use empower., including companies. Working preferences are private unless you turn them on, and companies can never search or filter by them.
- Contact details are never shown. Messages are visible only to the two people in the conversation, and to unmaskd. staff reviewing a reported message.
- Saved candidates and searches are private to the account that made them.
- empower. data is not shown on unmaskd., and unmaskd. data is not shown on empower. unless you connect the accounts.
Connecting your unmaskd. account
If you choose to connect, empower. receives your verified email address and, only if you tick them, your display name and profile photo. We record what you agreed to share and when. You can disconnect at any time; nothing else moves between the two services.
Keeping and deleting
You can unpublish or delete your talent or company profile at any time. Deleting your empower. account removes your empower. records, photos and logos straight away, and does not affect your unmaskd. account. Copies in encrypted backups expire on the normal backup schedule.
Questions
Questions about your data or this policy? Email [email protected] or see our Contact page. We aim to respond within 5 business days.