Your address,
handled with care.

About this site

This policy covers information handled by the operator of uPorn.ai through this website and its waitlist.

uPorn.ai is an editorial preview, not an active AI content platform. It does not offer visitor companion accounts, chat, image generation, purchases, or member features. A separate restricted owner dashboard is used to administer the waitlist and manually track website readiness.

What we collect through the waitlist

Joining the waitlist is optional and requires your explicit consent. When you submit the form we store:

• your email address;
• the consent wording you agreed to, its version label, and the time of signup;
• a hash of your email (used to detect duplicates) and a hash of your private removal token.

Why we collect it

We use this information only to maintain the waitlist, measure signup demand, and, in the future, to send launch and product-update emails to people who consented. No launch or product email is sent when you sign up, and no marketing email is sent today. We do not sell the waitlist and do not share it with advertising or affiliate partners.

Restricted administration

The verified owner can view current subscriber totals and consent records in a restricted dashboard. Addresses are masked by default and can be revealed to the owner for waitlist administration. Dashboard counts reflect currently retained records, not a lifetime history of removed subscribers. Removal deletes the active record from these views.

Owner sign-in is handled by Clerk, which processes administrator account information and uses authentication cookies. This sign-in is separate from joining the waitlist; registering an account does not grant administration rights or subscribe anyone to marketing. Administrative email searches are sent in request bodies rather than URLs. We do not log email addresses, search values, private removal tokens, or message bodies in application request logs. Hosting and authentication services may process their own technical and security records.

How it is protected

Your email address is encrypted before it is written to the database. The removal token is stored only as a hash, so we cannot show it to you again. These are practical safeguards, not a guarantee against every possible breach.

No verification or recovery

The site does not verify that you own the address you enter and does not send a confirmation email. Please enter only an address you control. We do not email the removal link and cannot recover it if you lose it.

Removing your signup

After a new signup, the page shows a private removal link. Opening it and confirming permanently deletes the active signup and withdraws your consent. The self-service removal process requires that link: whoever holds it can delete the entry. There is currently no verified-email recovery process.

Deletion applies to the active database record. It does not erase historical infrastructure backups, which may remain for the period set by the hosting provider.

The removal token is carried in the part of the link after the # symbol, which browsers do not send to the server on page load; the site removes it from the address bar after reading it. Keep this link private. Your email address is not included in the link.

Administrative activity history

An owner-only activity history records feature creation, updates, deletion, and authorized subscriber email reveals. It stores the action, time, generic owner role, and an opaque feature reference when applicable. It does not store subscriber identifiers or addresses, search terms, feature titles or notes, authentication credentials, or removal tokens. Removing a waitlist entry leaves no subscriber-identifying audit record. This history starts when the audit feature is deployed and does not reconstruct earlier activity.

Only the most recent 90 days are visible. Older activity records are deleted on the next activity read or recorded action, rather than by a continuously running scheduled job. There is no dashboard edit or delete control for individual events. Hosting backups and provider security logs may have different retention.

How long we keep it

Waitlist entries are kept until you remove them or the waitlist is closed. The administrative activity retention window is described above. We have not verified any specific retention schedule for hosting backups or provider logs.

Abuse prevention

To limit repeated requests, the server holds temporary hashed network identifiers in memory for up to 15 minutes. Raw IP addresses are not stored for this purpose, and request bodies, email addresses, and removal tokens are not written to application request logs.

Your adult-access confirmation

When you confirm you are an adult, your browser stores a small flag in localStorage on your device. It is not sent to us as an account record. Clearing your browser storage removes it, but does not remove a waitlist signup.

Hosting, security, and technical data

Replit hosts the website and its database. Hosting services may process technical data such as IP address, device and browser details, and requested pages for security, delivery, and diagnostics. The published app also includes a Replit traffic-measurement script. Hosting-provided measurement may process technical, device, and page-view data separately from waitlist records.

The site loads fonts from Google Fonts, so your browser makes requests to Google servers that can include your IP address and browser details. Hosting and external services have their own privacy practices, may use cookies or similar technologies, and may process data in other countries. We have not independently verified their specific processing locations or retention periods.

Custom interaction measurement

When Replit analytics is enabled for the published site, we send custom events for adult-access confirmation, waitlist-link clicks, FAQ openings, waitlist submission attempts, and whether those requests were accepted or failed. We also measure guide-card clicks on the Articles index and waitlist-link clicks in the editorial header or at the end of a guide. The only custom dimensions are fixed link locations, known guide slugs (or the Articles index), and FAQ question numbers. A guide click is not proof that someone read the guide or subscribed. Accepted waitlist requests include existing signups and are not a count of new subscribers.

These custom events do not include email addresses, consent text, removal tokens, article text, message contents, subscriber identifiers, or error details. We do not add custom tracking to private administration, sign-in, or signup-removal actions. Hosting-provided pageviews and technical measurement are separate from these custom events and follow the provider’s practices. Waitlist consent is not presented as analytics consent.

Your rights and choices

Depending on where you live, you may have rights to access, correct, or delete personal data, or to withdraw consent. The private removal link is the mechanism available now for deletion and withdrawal. For other requests, the contact route is currently pending and no working email address is offered yet. We will set response practices when a contact channel exists. This policy does not assert compliance with any specific law.

Adults only

The site is for adults only. Do not submit information if you are under 18 or under the age of majority where you live.

Changes

This policy is dated October 21, 2026. Updates will be posted on this page with a new date.