Skip to main content
yes·no·maybePrivacy

Privacy.

Last updated 05-28-2026

yesnomaybe doesn't ask who you are. The site only knows what you choose to put into a list.

What we store

  • The lists you make: the kinks you rated, the rating (yes, maybe, no), and any notes you wrote.
  • The list's title, if you set one.
  • The edit code for each list, hashed with argon2id. The hash can verify your code but cannot be reversed to read it.
  • The list link and edit link path segments.
  • Created and last-updated timestamps.

That's the complete inventory. Anything that isn't named here, the site didn't ask for and doesn't have.

Tracking

The only thing the site records from you is the rating itself — that's the entire point of a list. Clicks, scrolls, searches, dwell time, mouse position, and the rest of the usual behavioural signals are ignored.

The page loads no analytics, tracking, fingerprinting, or third-party scripts.

Cookies

Two cookies, both HttpOnly and path-scoped to your specific list:

  • fresh_code_<token> — set when you create a list, expires in 15 minutes, SameSite=Strict. Carries the edit code so the next page can show it once.
  • edit_<token> — set after you create or unlock a list, expires in 24 hours, SameSite=Lax. Carries the edit token that authorizes you to edit.

Hosting and logs

Our hosting provider records standard connection metadata at the network level: IP address, timestamp, request path, response code. Those logs exist to keep the service running. We don't aggregate, analyze, or export them.

Who can see what

The list link is the access control. Anyone with the link can view the list. Anyone with the edit code can edit it. List contents stay between you and whoever you choose to send the link to — there's no buyer for them and no third party in the loop.

List pages carry noindex, nofollow and Referrer-Policy: no-referrer so the link doesn't leak to fonts, analytics, or any third-party request the browser makes.

Security

  • Edit codes are hashed at rest with argon2id.
  • Unlock attempts are rate-limited.
  • The edit code is delivered via an HttpOnly cookie, never as a query parameter.

How long we keep things

Lists are kept until you delete them. The edit page has a delete button — once you confirm, the list, all ratings, all notes, and the link itself are gone immediately. There's no undo. An inactivity-based cleanup for forgotten lists is planned but not yet running.

Changes to this page

If anything changes, this page updates and the "Last updated" date at the top moves.

Contact

This is a private project. Reach the maintainer directly.