Content
Wisps, Echoes, reports, appeals and their timestamps are stored so the product can work. Public Stream content is visible to anyone allowed to visit the platform.
Privacy notice · Public service
Anonymous outside.
Minimal inside.
STKEY is designed without accounts or public profiles. This notice explains what the platform still needs to process to store notes, prevent abuse and prepare privacy-respecting advertising.
Updated 21 July 2026Keys
Lookup and Keeper keys are transformed with keyed cryptographic hashes. STKEY does not store them in readable form and cannot recover them.
Safety
A short content excerpt and a non-readable connection fingerprint may be retained for rate limiting, abuse prevention, reports and moderation review.
Advertising
STKEY does not sell personal data. Ads are selected from page context or only the minimum information needed to operate the service. Google AdSense is connected for site review, while non-essential advertising remains consent-gated.
Why data is used
Specific purposes only.
Content is processed to retrieve Wisps, publish opted-in Stream posts, attach Echoes and preserve editable revisions. Security signals are used to prevent guessing, spam and serious abuse. Moderation decisions are used to hide, restore or remove content and to process appeals.
STKEY does not sell personal data or create advertising profiles today. Google AdSense is the connected advertising provider. Advertising is limited to page context or information strictly necessary to operate the service, and non-essential ad requests remain disabled until the visitor makes an affirmative choice where consent is required.
Retention
Not longer than needed.
Single-word Wisps expire after seven days. Phrase Wisps and their Echoes remain until removed or the service applies a future lifecycle rule. Revision history follows the Wisp. Expired rate-limit records are routinely cleared.
Resolved moderation records, report details and inactive abuse fingerprints are scheduled for removal after 180 days. Open or appealed safety cases may remain until resolution. Hosting infrastructure may keep limited technical logs under its own security retention.
Your choices
Consent can change.
Essential safety processing does not depend on advertising consent. The advertising choice is stored only on this device and can be changed at any time using the control below. Rejecting advertising does not block STKEY.
Installing STKEY on Android adds the web app to the device and stores its interface files. It does not request access to contacts, photos, location, microphone or other sensitive device permissions.
Public content
Share deliberately.
Do not place confidential information, personal contact details or another person’s private data in a Wisp. Releasing a Wisp to the Stream makes its content and Echoes public to platform visitors even though its lookup key remains hidden.
Reports and anonymous appeals are available without an account. Because STKEY has no identity profile, a requester may need a Wisp or review reference to help locate a relevant record—never disclose a secret key in a report.
Operator details
Who operates STKEY.
STKEY is operated by Jackson Diogo Carlota Rocha from Paraná, Brazil. Privacy questions, data requests and child-safety concerns may be sent to privacy@stkey.app.
The service is publicly available while advertising and Android distribution are prepared. The Android application is intended for adults and is not directed to children. This notice is a product transparency baseline and should receive a jurisdiction-specific legal review before commercial advertising begins.