Content
Wisps, Echoes, reports, appeals and their timestamps are stored so the product can work. A signed-in user may deliberately link a Keeper-protected Wisp to a private space.
Privacy notice · Public service
Anonymous outside.
Minimal inside.
STKEY remains usable without an account. An optional private space can link Wisps only after the holder proves the Keeper key, without creating a public profile.
Updated 24 July 2026Keys
Lookup and Keeper keys are transformed with keyed cryptographic hashes. STKEY does not store them in readable form and cannot recover them.
Account
Optional accounts store a private space name, passkey public credential, session record, plan and deliberately linked Wisp references. STKEY never receives the device biometric or PIN.
Advertising
STKEY does not sell personal data. Ads are selected from page context or only the minimum information needed to operate the service. Google AdSense is connected for site review and responsive ad spaces are configured, while manual advertising remains consent-gated.
Why data is used
Specific purposes only.
Content is processed to retrieve Wisps, publish opted-in Stream posts, attach Echoes and preserve editable revisions. Security signals are used to prevent guessing, spam and serious abuse. Moderation decisions are used to hide, restore or remove content and to process appeals.
STKEY does not sell personal data or create advertising profiles today. Google AdSense is the connected advertising provider. Advertising is limited to page context or information strictly necessary to operate the service, and non-essential ad requests remain disabled until the visitor makes an affirmative choice where consent is required.
Optional accounts
A private layer, not an identity.
Creating My Space is optional. Its name is used only to distinguish the account and is not displayed with public Wisps or Echoes. Authentication uses a passkey: STKEY stores a public credential and counter while the private credential, biometric check or device PIN remains with the user’s device or passkey provider.
Linking a Wisp requires its lookup key and Keeper key. Those keys are checked against cryptographic hashes and are not copied into the account. The account stores only the Wisp reference after successful proof.
Retention
Not longer than needed.
Single-word Wisps expire after seven days. Phrase Wisps and their Echoes remain until removed or the service applies a future lifecycle rule. Revision history follows the Wisp. Expired rate-limit records are routinely cleared.
Resolved moderation records, report details and inactive abuse fingerprints are scheduled for removal after 180 days. Open or appealed safety cases may remain until resolution. Hosting infrastructure may keep limited technical logs under its own security retention.
Your choices
Consent can change.
Essential safety processing does not depend on advertising consent. The advertising choice is stored only on this device and can be changed at any time using the control below. Rejecting advertising does not block STKEY.
Installing STKEY on Android adds the web app to the device and stores its interface files. It does not request access to contacts, photos, location, microphone or other sensitive device permissions.
Public content
Share deliberately.
Do not place confidential information, personal contact details or another person’s private data in a Wisp. Releasing a Wisp to the Stream makes its content and Echoes public to platform visitors even though its lookup key remains hidden.
Reports and anonymous appeals remain available without an account. A My Space account is never shown as the author of a Wisp or Echo. A requester may need a Wisp or review reference to help locate a record—never disclose a secret key in a report.
Operator details
Who operates STKEY.
STKEY is operated by Jackson Diogo Carlota Rocha from Paraná, Brazil. Privacy questions, data requests and child-safety concerns may be sent to privacy@stkey.app.
The service is publicly available while advertising and Android distribution are prepared. The Android application is intended for adults and is not directed to children. This notice is a product transparency baseline and should receive a jurisdiction-specific legal review before commercial advertising begins.