privacy, plainly.
What alias stores, what it never sees, and how to delete it.
01 what we store
Your email, your page (what you put on it, the handles you add) and who invited you. If you sign in with Discord or Google, the name, picture and email that account shares with us, as the next part says. Sessions are stored as a scramble, never the raw token.
02 signing in with discord or google
Discord gives us your Discord id, username, display name, avatar, avatar decoration, the Discord badges and server tag you wear, and your email (Discord's identify and email permissions). Google gives us your Google account's id, name, profile picture and email address, the email only when Google says it is verified (the openid, email and profile permissions). We use them only to sign you in, to show your name and picture where you choose to, and to email you about your account. We never get your Discord or Google password, your contacts, your files or anything else, and the sign in's access token is used once to read those details and never kept. Unlink either one in Studio settings, or delete your account, and what came from it goes with it.
03 google user data
alias's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, share it with anyone, use it for ads, or use it to train AI models. Only the sign in above ever asks Google for anything.
04 passwords
If you sign in with an email and a password, the password itself is never stored: only a slow, salted scramble of it (PBKDF2), mixed with a secret key, so nobody can read it back, us included. The key behind two step sign in is sealed the same way.
05 what we never see
Your Discord or Google password. The logins you add inside the app (PSN, Xbox, Epic, Instagram and others) stay on your computer, encrypted with your Windows account. They are never sent to alias.boo.
06 what the app sends us
When you are signed in, the app syncs your vault and handles so they show on your profile, and asks us whether there is an update. Name checks go straight from your computer to each platform, not through us.
07 bug reports
If the app crashes, it sends us the error, the app and Windows version, and a list of the last things the app did (which names it checked and how each platform answered), so we can fix it. Turn this off any time in the app, under Settings. Reports you write yourself are only sent when you press Send. Reports never include your logins, keys or vault notes, and each report is deleted after 90 days.
08 profile views
Views and taps are counted without cookies. A visitor is a one-way scramble of their connection and browser for that day, so one person counts once a day and can't be followed from one day to the next. No IP addresses are stored, and nothing is older than 120 days. We do not run ad trackers or sell data.
09 sections and players
Sections fill themselves in from GitHub (repos), Discord (a server's card), Spotify and YouTube (a song's or video's cover and title): alias.boo asks them, never the visitor's browser. The covers and pictures load from their picture servers (image-cdn-*.spotifycdn.com, i.ytimg.com, cdn.discordapp.com), which see the visitor's connection like any picture host. A Spotify or YouTube player is that company's own and loads only once the visitor taps play. YouTube's is the privacy-enhanced one (youtube-nocookie.com).
10 game ranks
A rank you send for checking goes to the team with its tracker link and your screenshot. Your page shows only what the team verified. The screenshot is deleted 30 days after the decision. A rank you start and never finish (no screenshot within 24 hours) is dropped.
11 pictures
Pictures you upload and payment screenshots are stored without what a file can carry beside the picture: where a photo was taken, the phone, the time and the editing app come out first. Animations keep every frame. Videos and songs are stored as you sent them.
12 drafts and versions
While you edit in the Studio, the changes you have not put live yet are kept on alias.boo a moment after you make them, so they follow you to your other devices. They go away when you go live or drop them. Each time your page goes live we keep a copy of it for the time machine: the last 30, or up to 1,000 with Plus. A phone you open your draft on with the Studio's QR code reads it for 30 minutes with a one-time key, and we keep only a scramble of that key. All of it is in your data export and is deleted with your account.
13 emails
We email you about your account (confirming your address, a new sign in, your orders) and, only while you leave them on, news, with a one tap unsubscribe in each. Mail you send to an alias.boo address, like hey@alias.boo, is kept so the team can answer it; it is in your data export and is deleted with your account.
14 cookies
One sign-in cookie, one short cookie while you sign in, and one for a pending invite. That is all.
15 where it lives
On Cloudflare (Workers, D1 database, R2 storage). Emails go out through Resend, an email service.
16 deleting
Delete it in Studio settings or ask us and we delete your account, profile and handles, and invite links you made that nobody used stop working. Orders stay on record for the books. Backups roll off within 30 days.
17 contact
Email hey@alias.boo, or reach Kh8da and the team in the alias Discord (alias.boo/discord): open a ticket.
Contact: hey@alias.boo · run by Kh8da