Privacy
Last updated: 5 August 2026
What we collect, and why
- Wall owners: your name, email address, password (stored only as a salted hash — we cannot read it), and whatever you add to your profile: photo, headline, skills, location, intro. Signing in with Google gives us your name and email from Google; never your Google password.
- People who leave a vouch: your name, role, company and the vouch text — these appear publicly on the wall you vouched for, with your consent given on the form. Your email address is never shown publicly; it is used once to send the verification link and shown privately to the wall’s owner.
- Everyone: a salted, one-way hash of your IP address when you submit a vouch, kept solely for rate limiting. We cannot recover the address from it. The Cloudflare Turnstile captcha runs on submissions and account creation under Cloudflare’s privacy policy.
What we don’t do
- No selling or sharing of personal data with advertisers. Ever.
- No tracking cookies. The only cookie is the one that keeps you signed in.
- No reading your data beyond what running the service requires.
Where it lives
Data is stored with Cloudflare (our host and database provider) and transactional email is sent through Resend. Both process data on our behalf under their own security terms. Traffic is encrypted in transit; data is encrypted at rest.
Removal
- Wall owners can remove any vouch from their wall at any time.
- If you left a vouch and want it gone, or want your account and data deleted, email support@vouchapp.dev and we’ll do it.