Privacy.
Last updated 05-28-2026
yesnomaybe doesn't ask who you are. The site only knows what you choose to put into a list.
What we store
- The lists you make: the kinks you rated, the rating (yes, maybe, no), and any notes you wrote.
- The list's title, if you set one.
- The list link and edit link path segments. The edit link path is what authorizes editing.
- For older lists that set an edit code: its argon2id hash. The hash can verify the code but cannot be reversed to read it. New lists use a private edit link instead and store no code.
- Created and last-updated timestamps.
That's the complete inventory. Anything that isn't named here, the site didn't ask for and doesn't have.
Tracking
The only thing the site records from you is the rating itself — that's the entire point of a list. Clicks, scrolls, searches, dwell time, mouse position, and the rest of the usual behavioural signals are ignored.
The page loads no analytics, tracking, fingerprinting, or third-party scripts.
Cookies
One cookie, HttpOnly and path-scoped to your specific list:
- edit_<token> — set when you create a list or open its edit link, expires in 24 hours, SameSite=Lax. Carries the edit token that authorizes you to edit.
Hosting and logs
Our hosting provider records standard connection metadata at the network level: IP address, timestamp, request path, response code. Those logs exist to keep the service running. We don't aggregate, analyze, or export them.
Who can see what
The links are the access control. Anyone with the list link can view it. Anyone with the edit link can edit it. List contents stay between you and whoever you choose to send the link to — there's no buyer for them and no third party in the loop.
List pages carry noindex, nofollow and Referrer-Policy: no-referrer so the link doesn't leak to fonts, analytics, or any third-party request the browser makes.
Security
- Any edit code (older lists) is hashed at rest with argon2id.
- Edit-code unlock attempts are rate-limited.
- The edit token rides in an HttpOnly cookie; the private edit link is shown only on the create confirmation page, never as a query parameter.
How long we keep things
Lists are kept until you delete them. The edit page has a delete button — once you confirm, the list, all ratings, all notes, and the link itself are gone immediately. There's no undo. An inactivity-based cleanup for forgotten lists is planned but not yet running.
Changes to this page
If anything changes, this page updates and the "Last updated" date at the top moves.
Contact
This is a private project. Reach the maintainer directly.