Skip to content
unnudged

Updated 2 November 2026

What Unnudged collects

“We” means Unnudged. We collect an email address when you ask for early access or a topic, the details you send in a removal request, and account details if you sign in. We do not run analytics, advertising or cross-site trackers, and we do not sell personal information or share it for targeted advertising.

Our pages show public posts from X. A removal request asks us to take a post or an account off our pages.

This version takes effect on 2 November 2026. The first version took effect on 27 October 2026. If this page and the terms disagree, the terms win.

1. Who operates Unnudged

Unnudged operates Unnudged at unnudged.com. Unnudged is the name we trade under; this page does not name a separate company. Contact: hello@unnudged.com.

Unnudged is not affiliated with, endorsed by, or run by X Corp.

2. What we collect

If you join the early-access list, we store the email address you type, the page you came from, and the topic you asked for, if any. We use the email to tell you when access is ready. We do not send newsletters.

If you ask us to track a topic, we store the topic name, your email as a vote, and whether you also joined early access. We use the email to tell you when the topic has a page. We do not publish the email.

If you ask us to remove a post or account, we store the link or @handle you paste, any note you add, and the date. A person reads the request before we act. We do not publish the request.

If you create an account, we store your name, email, a hashed password, and session details such as your IP address, browser and device. We use them to sign you in and keep the account secure. We do not ask for a phone number or payment details.

If you email us, we keep the message and our reply. We use them to answer you and keep a record.

3. What we do not collect

We do not run analytics, advertising pixels, session recording, or any script that follows you across other sites. We do not set advertising or cross-site cookies.

We do not send newsletters or marketing.

We do not keep our own access logs with your IP address. The rate-limit counter uses your IP address in memory; it is not written to the database. A signed-in session stores the IP address that made it, as section 2 says.

We do not ask for a phone number or payment details at launch.

4. Network addresses

Rate limits use the address your connection arrives with. The counter is a list of timestamps in memory. It is not written to the database, and it resets when the server process restarts.

If you sign in, the session row stores the IP address, browser and device that created the session. That is separate from the rate-limit counter. It is deleted when you sign out or the session expires, or when the account is deleted.

OVHcloud hosts the site, and Cloudflare carries requests to it. Each may process limited network metadata under its own policy.

5. The session cookie and theme

After you sign in, the browser holds a session cookie for this host. It is HttpOnly and Secure, and it is not a tracking cookie. The session lasts 30 days. Using the site refreshes it after a day.

The light or dark choice is stored in this browser under the name xv-theme. It is not a cookie and is not sent to the server.

We do not set analytics or advertising cookies. Cloudflare may set a short-lived security cookie to tell people from bots; it is not used for analytics or advertising.

Clearing site data removes both. Blocking the session cookie stops sign-in; the public pages still load.

6. Public posts from X

Our pages show public posts from X about the topics we follow. We collect them through our own internal intake systems. For each post we collect, we store the post text, the author's handle and display name, their profile picture, the public metrics X shows (likes, replies and reposts), the time it was posted, and a link to the original. We keep every post that arrives, including posts we decide not to show, and our own label for each post.

We do not show private posts, direct messages or protected accounts, and we do not take your email or phone number from X.

If your post appears here, Your posts on Unnudged explains why. If you delete your post, make your account protected, or ask us to remove it, it leaves our pages at our next check. The check runs weekly. A person reviews removal requests, and we aim to act within 7 days.

Posts belong to the people who wrote them. We do not claim ownership of them. X's privacy policy applies when you follow a link to X.

We do not use posts to build profiles of people, contact people because their post appears here, or work out what one person believes across topics.

7. How it is stored

The site is served over HTTPS. The database is on our OVHcloud server, and access to the server is restricted to the operator. Passwords are stored as hashes, not plain text. We keep the software up to date.

No method of transmission or storage is completely secure, so we cannot promise that a breach will never happen. If a breach affects your personal information, we will notify you and the authorities as the law requires.

If you think your account has been compromised, email hello@unnudged.com.

8. How long we keep it

Early-access and topic-request emails are kept until you ask us to delete them, or 24 months after you gave them to us, whichever comes first.

Removal requests are kept for as long as the removal stands, plus 12 months. A removal request is also the record that keeps the post off our pages. If you ask us to delete it, we may keep the minimum needed to keep the removal in place.

Account information is kept while your account is open. If you ask us to delete it, we delete it within 30 days, and it leaves our backups within 90 days. Deleting your Unnudged account does not remove public posts you wrote on X; use the removal form for those.

Messages you send us are kept for 24 months after our last reply, unless we need them longer for a legal or security reason.

OVHcloud's and Cloudflare's own retention is set by each of them.

Counts and summaries that do not identify anyone may be kept indefinitely.

If we need to keep something longer for a legal obligation, a dispute, or to prevent abuse, we keep only what we need and for as long as we need it.

9. Who else handles it

OVHcloud hosts the site and stores the database in the United States.

Cloudflare sits in front of the site. It provides our DNS and carries every request between your browser and our server, so it sees your IP address, the pages you ask for and your browser details. It also protects the site from attacks and caches files such as scripts and images.

Purelymail hosts our mailbox, so it handles the messages you send to hello@unnudged.com and our replies.

Profile pictures in the posts we show load from X's image servers at pbs.twimg.com. Your browser requests them directly from X, so X sees your IP address. Our pages ask the browser to send no referrer, so X does not get the page you are on. X's privacy policy applies to that request.

We do not use an email marketing platform. We may use an email delivery provider to send the message you asked for; it processes the address on our instructions. We will name it here before it sends anything.

We do not take payments at launch. If we add paid plans, we will name the payment processor here before we charge anyone.

We may disclose information if the law requires it, or if we believe in good faith that disclosure is necessary to prevent serious harm. We may not be able to tell you before we do.

If Unnudged is sold, merged or its assets are transferred, information may be part of that transfer. We will tell you before your information becomes subject to a different privacy policy.

Our public-post intake is internal infrastructure, not a third-party data provider. A person at Unnudged can read the messages you send us and the removal requests.

10. Age

The site is for people 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, email hello@unnudged.com and we will delete it.

11. California

We do not sell personal information. We do not share it for cross-context behavioral advertising. You can ask what we hold, ask us to correct it, ask us to delete it, and ask for a copy. We will not charge you a different price or provide a different level of service for asking.

California law gives you the right to know the categories of personal information we collect and disclose, to delete, to correct, to opt out of the sale or sharing of personal information, to limit the use of sensitive personal information, and not to be discriminated against for exercising those rights. We do not collect sensitive personal information for the purpose of inferring characteristics about you.

Email hello@unnudged.com. We may need to verify your identity, and you can use an authorized agent. We respond within 45 days for a California request, and we will tell you if we need more time. If we refuse, you can appeal by replying to our decision.

Some information may remain in backups for up to 90 days, and we may keep records the law requires or that we need to establish or defend legal claims.

12. If you are in the EU or UK

We process information in the United States. This page does not name an EU representative or a cross-border transfer contract.

We process the email you give us because you asked us to contact you. We process account data to provide the account. We use rate-limit data and server metadata to run and protect the site. We use removal requests to act on your request. We rely on legitimate interests for the public catalog of public posts, balanced against your rights. Where we ask for consent, you can withdraw it.

You can ask us to tell you what personal information we hold, to correct it, to delete it, to restrict how we use it, to give you a copy, or to object when a use is not required to provide the service you asked for. You can complain to a privacy regulator where you live. Email hello@unnudged.com. We respond within 30 days.

We may ask for information to verify your identity. If we refuse a request, you can appeal by replying to our decision.

Some information may remain in backups for up to 90 days, and we may keep records the law requires or that we need to establish or defend legal claims.

13. Changes

We do not have a general email list for privacy changes. When this page changes, the date at the top changes. If a change materially affects how we use information we already hold, we will tell account holders by email or with a prominent notice on the site before it takes effect.

If you keep using the site after a change, the new version applies.

14. Contact

Privacy, removal and security questions: hello@unnudged.com