Privacy

Who we are

TODAY I ("we", "us") runs todayi.in. Questions about your data: hello@todayi.in.

What we collect

• Your email address, to send sign-in links and codes. It is never shown to other people.
• A private name and your city, if you set them. Only you see the name.
• What you post and do: posts, photos, replies, reactions, saves, reports, reviews and blocks. These are linked to your account inside our systems.
• Your approximate location, worked out by Cloudflare from your IP address (city and region), to show posts from around you. We don't store it, unless you post "from where you are", which adds that city's name to our city list (not you).
• A one-way hash of your IP address when you ask for a sign-in email, used for an hour to limit abuse and deleted within two days.
• Cookies: ti_session keeps you signed in (30 days, renewed while you use the site) and ti_csrf protects your actions. No advertising or tracking cookies. Your browser also stores a few preferences on your device (localStorage).

What other people see

Posts are anonymous to other users. They see the text, category, city, time and photo, never your email, name or account. Replies show as "Someone", or "The person who posted this" on your own post.

Anonymous to other users does not mean untraceable. Our moderators can see which account wrote a post or reply, to stop abuse, and we may share that with authorities when the law requires it.

Photos

Photos are re-encoded in your browser before upload, and files carrying location or camera metadata are refused. Every photo is checked by an automated nudity classifier on our own server, which keeps no copy. A photo is reachable by its unguessable link from upload until it's removed. Photos never attached to a post are deleted after an hour.

Who processes your data

• Cloudflare hosts the site, the database and the photos, runs the "human check" (Turnstile), and gives us privacy-friendly visit statistics (Web Analytics, no cookies).
• Our own mail server sends sign-in emails. The sending service keeps only a hash of each recipient, for two days, to enforce daily limits.
• Our own photo classifier, as above.
• Google Fonts: your browser loads the site's fonts from Google, which receives your IP address.

We don't sell your data or share it with advertisers. Cloudflare runs a global network, so your data may be processed outside your country.

How long we keep it

• Sign-in links and codes work for 15 minutes; their records, including the IP hash, are deleted within two days.
• Your account and content: until you delete them, or we remove them for breaking the Terms.
• When you delete your account, your posts are taken down, your photos are deleted, and your account and everything linked to it are deleted. Moderation records may keep an internal ID and a note of what was done. Our host's database backups roll over within 30 days.

Your choices and rights

• Download your data: Profile → Download my data.
• Delete your account: Profile → Delete account.
• Correct your name or city in your profile, or write to us for anything else.

Depending on where you live (for example under India's Digital Personal Data Protection Act, 2023, or the EU/UK GDPR), you may also have rights to access, correct and erase your data, to withdraw consent, to nominate someone to act for you, and to complain to us and then to your data protection authority. Write to hello@todayi.in.

Age

TODAY I is for people aged 18 or older who are adults where they live. We don't knowingly collect data from anyone younger; if we learn an account belongs to someone underage, we delete it.

Security

Everything is served over HTTPS. Sign-in tokens and sessions are stored only as one-way hashes. Access to moderation tools is limited to moderators.

Changes

If this policy changes, we'll update the date at the top, and for significant changes tell you on the site.