KUDDIT / PRIVACY
Your curiosity. Your control.
Effective October 14, 2026
Private messages and expiry
Text, photos, voice, video and interactions are accessible to conversation participants. Transport uses HTTPS; the server processes content, so messaging is not end-to-end encrypted. Messages and sent attachments expire 48 hours after sending and are removed by a cleanup job each minute. Unsent uploads expire after 15 minutes. Recording begins only when you grant microphone permission and start it. Recall cannot remove copies saved by a recipient. Conversation status, request limits, blocks, read receipts and mute preferences remain until account deletion. System notices and reports are retained for up to 90 days; reporting does not extend message or media retention.
Views and automated checks
Views require meaningful dwell time and are counted at most once per account or installation, content item and day; your own content is excluded. Hashed deduplication records remain for about eight days, daily metrics for 90 days and cumulative counts until content deletion. Publication, reports and scheduled checks examine website responses, redirects, public text and known phishing URLs. Risk matches stop display and record a reason. Automated checks cannot identify every violation. Authors may request human appeal review. Inspection records normally remain for 90 days; pending appeals and evidence remain until resolved. Decisions and time-limited exceptions tied to matching content prevent repeat false positives.
Profiles and posts
You may add a profile cover, website, interests and birthday. Covers, bios, links, interests and the age calculated from your birthday are public. Your full birthday is only visible to you and can be removed. Your IP region is estimated from the network used at your latest sign-in or profile refresh: province-level in mainland China and country or territory elsewhere. Your profile does not display the IP address or precise location. Posts may be public or visible only to you. Public posts, photos, comments, replies and likes are visible to others; mentions send an in-app notification. Hiding a post prevents others from accessing its post and dedicated image endpoints; copies already saved by others cannot be recalled. Covers and post images remain while used. Unreferenced uploads are removed by the cleanup job once they are at least two days old. Deleting a post also deletes its comments, likes and mention records. Deleting your account removes your posts.
Accounts and public profiles
We store your username, display name, bio, chosen profile photo, and an Argon2id password hash and a secure recovery-code hash. Android Keystore encrypts your sign-in token on the device. Your name, username, photo, bio, follow relationships, recommendations, and claimed websites are public. Passwords, recovery codes, and private saved items are not public.
Saved items and browsing history
Guest saves remain on the device and can be imported after signing in. Account saves sync with the server. Browsing history keeps up to 100 entries on the device and can be cleared at any time.
Recommendations and interactions
To personalize your feed, we record planet impressions, viewing duration (up to 60 seconds per view), opens, shares, and Not interested signals. Guests use a random installation identifier; signed-in users use their account identifier. Regular recommendation signals are retained for up to 90 days. Not interested records remain until you reset preferences or delete your account. Likes, saves, and follows also influence recommendations. Reset recommendations in Settings deletes viewing signals and Not interested records; likes, follows, and saves can be removed separately. Comments, replies, and likes are stored on the server. Comments are public and can be deleted or reported. Blocking limits access to profiles and interactions between both accounts. Activity notifications are retained for up to 90 days.
Submissions, images, and verification
Approved website details and contributor identities are public. Uploaded images are re-encoded and original metadata is removed. We access only images you choose. Unused uploads are removed after two days; public covers and profile photos remain while in use. Website owners verify domain control with DNS TXT records. Official website certification requires a separate manual review, with an audit history.
Third-party websites
Your device browser opens planets. Each external website has its own account, cookie, content, and privacy practices. Kuddit does not read passwords entered on third-party websites.
Service operation
The server retains access logs needed to prevent abuse and investigate faults, including IP address, request path, time, and status. The app contains no advertising or third-party behavioral tracking SDKs.
Deletion and reports
You can clear history, reset recommendations, delete comments, undo interactions, and delete your account in Settings. Account deletion removes account information, saves, follows, likes, recommendation activity, and account notifications. Your comment text is deleted; other people's replies remain. Published website information and covers remain without your account association. Use planet or comment reporting to raise ownership or content concerns.