Privacy Policy

1. Privacy Overview

LBB Confessions is built on anonymity. We deliberately collect as little personal information as possible. We do not require accounts, email addresses, or real names — ever.

This Privacy Policy explains what limited data we do collect, why we collect it, how we use it, and your rights regarding it. We operate under the principle of data minimization — if we don't need it to run the Platform, we don't collect it.

This Policy applies to all users of LBB Confessions, accessible at lbbconfessions.com and any related subdomains or applications.

2. Information We Collect

2.1 Session Tokens (Automatically Generated)

When you interact with the Platform (submitting a confession, liking, or disliking content), we generate a random, anonymous session token stored in your browser cookie ("lbb_session"). This token:

→Is a randomly generated string with no connection to your identity
→Cannot be used to identify you personally
→Is used solely to associate your reactions with content (preventing spam voting)
→Expires after 365 days of inactivity
→Is stored locally in your browser and sent to us only when you interact with content

2.2 Submitted Confession Content

When you submit a confession, we store the text content you provide, the category you select, and the timestamp of submission. We do NOT store your IP address in connection with your confession, any device fingerprint, or any identifying metadata.

⚠

Important: Do not include personal identifying information — your own or others' — in your confession text. We cannot retroactively make content anonymous if you voluntarily include identifying details.

2.3 Automatically Collected Technical Data

Like all web servers, ours automatically receives certain technical data when you visit:

Data Type	Purpose	Retention
IP Address	Server security, abuse prevention	7 days in server logs, then deleted
Browser User-Agent	Technical compatibility	7 days in server logs, then deleted
Pages Visited	Platform analytics (aggregated)	30 days, aggregated
Timestamps	Activity logging for abuse prevention	30 days
Referrer URL	Understanding traffic sources	30 days, aggregated

2.4 What We Do NOT Collect

✕Your name, email address, or any account credentials
✕Phone numbers or physical addresses
✕Payment information of any kind
✕Social media profiles or linked accounts
✕Precise geolocation data
✕Biometric data
✕Contact lists or address books

3. Cookies & Local Storage

LBB Confessions uses a minimal cookie approach. We use exactly one first-party functional cookie:

Cookie Name	Purpose	Duration	Type
lbb_session	Anonymous session token for reaction tracking and anti-spam	365 days	Functional / Essential

We do not use tracking cookies, advertising cookies, or third-party analytics cookies that track you across other websites. We do not use Google Analytics, Facebook Pixel, or similar cross-site tracking technologies.

ℹ

You can delete your lbb_session cookie at any time through your browser settings. Doing so will reset your reaction history and you will be treated as a new visitor. This is also how you can effectively 'delete' your association with any reactions you've made.

4. How We Use Your Information

We use the limited data we collect exclusively for the following purposes:

→Operating and displaying the confession feed and related Platform features
→Preventing duplicate or spam reactions (likes/dislikes) via session tokens
→Detecting and preventing abuse, bot activity, and policy violations
→Improving Platform performance and fixing technical issues
→Complying with legal obligations when required by law
→Aggregated, anonymous analytics to understand how the Platform is used

We do not use your data for advertising targeting, profiling, or selling to third parties. Period.

✓

We do not sell, rent, or trade your data to any third party for commercial purposes. This is a core principle of LBB Confessions, not just a legal obligation.

5. Data Sharing & Third Parties

We share your data only in the following strictly limited circumstances:

→Service Providers: We use hosting and infrastructure providers (such as cloud servers) that process data on our behalf under strict data processing agreements. They cannot use your data for their own purposes.
→Legal Requirements: We may disclose data if required by a valid court order, subpoena, or applicable law. We will notify you of such requests to the extent legally permissible.
→Safety: We may share information if we have a good-faith belief it is necessary to prevent imminent harm to a person.
→Business Transfer: In the event of a merger, acquisition, or sale of assets, data would be transferred as part of that transaction with equivalent privacy protections maintained.

Third-Party Services We Use

Service	Purpose	Data Shared
Cloud Hosting Provider	Server infrastructure	Server logs only
CDN Provider	Content delivery speed	Request metadata
Database Provider	Storing confessions & reactions	Session tokens & content

6. Data Retention

We retain data for as long as necessary to provide the Platform's services or as required by law, whichever is longer.

Data Type	Retention Period
Confession content	Indefinite, until deletion is requested or content violates policy
Session tokens	365 days from last activity
Reaction records (likes/dislikes)	Duration of associated session token
Server logs (IP addresses)	7 days, then permanently deleted
Aggregated analytics	12 months
Abuse/moderation records	24 months for safety purposes

ℹ

Because confessions are anonymous, we cannot fulfill 'right to erasure' requests for specific confessions without the confession's unique ID. If you submitted a confession and wish it deleted, contact us with the confession ID.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your data:

→Right to Access: Request a copy of what limited data we hold associated with your session token.
→Right to Erasure: Request deletion of your session token data and associated reactions.
→Right to Correction: Request correction of any inaccurate data we hold.
→Right to Restriction: Request we limit how we use your data.
→Right to Portability: Receive your data in a machine-readable format.
→Right to Object: Object to certain uses of your data.
→Right to Non-Discrimination: We will not treat you differently for exercising your privacy rights.

ℹ

Because we collect no identifying information, we cannot verify that a request is from the person who submitted a particular confession. To exercise rights over confession content, you must provide the unique confession ID and your session token to establish association.

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act. We do not sell personal information. You have the right to know what personal information is collected, to delete personal information, and to opt-out of sale (which we do not engage in).

European Users (GDPR)

For users in the European Economic Area, our legal basis for processing your limited data is Legitimate Interests (operating the Platform and preventing abuse). You have the right to lodge a complaint with your local data protection authority.

8. Security

We implement industry-standard security measures to protect the limited data we collect:

→All data transmission is encrypted via HTTPS/TLS
→Database access is restricted to authorized personnel only
→Session tokens are randomly generated and not linked to any identity
→Regular security audits of our infrastructure
→Automatic deletion of server logs after 7 days
→No storage of sensitive personal information that could be breached

⚠

No security system is perfect. While we take strong precautions, we cannot guarantee absolute security. Our most powerful security measure is not collecting your personal information in the first place.

9. Children's Privacy

LBB Confessions is not intended for users under 18 years of age. We do not knowingly collect information from minors. If you believe a minor has used the Platform, please contact us immediately at legal@lbbconfessions.com and we will take appropriate action.

If we discover that a user is under 18, we will take steps to remove their submissions and block their session from the Platform. Any content involving minors in a sexual context is immediately removed and reported to NCMEC and law enforcement.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the 'Last Updated' date at the top of this page and, where appropriate, post a notice on the Platform.

Your continued use of the Platform after changes are posted constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically.