Privacy Policy

Last updated: October 23, 2026

Psstly is a free, non-commercial hobby project run by an individual in New York, United States. It isn’t a company, it doesn’t make money, and it has no ads. This policy explains what information Psstly handles when you use psstly.app or the Psstly chat on another website, and what you can do about it. In this policy, “we” and “us” mean the person who runs Psstly.

The short version

• We collect only what’s needed to run the chat, inbox, and help center.
• We don’t sell, rent, or trade anyone’s information, and we don’t use it for advertising.
• We don’t use advertising or tracking cookies.
• You can ask us to see, fix, or delete your information at any time by emailing support@psstly.app.

Who this covers

Users are people who create a Psstly account to set up a workspace or help a team with support. Visitors are people who use a Psstly chat or help center on a website run by a user (we call that user the “site owner”).

When you chat on someone else’s website, that site owner decides what to ask for and can read and keep what you send. We store it for them so the chat works. If you want something you sent removed, you can ask the site owner, or email us and we’ll help.

What we collect

From users

• Your name, email address, and password. Passwords are handled by Google Firebase Authentication; we never see or store them in plain text.
• If you sign in with Discord: your Discord user ID, username, display name, and email address (if Discord has verified it). We don’t get your Discord password, messages, or servers.
• What you create: workspace settings, preset replies, help articles, news posts, tickets, notes, comments, tags, and automation rules.
• Activity in your workspace, such as replies you send and changes you make, and when you were last online.

From visitors

• Messages you send in the chat, and your rating and comment if you leave one.
• Your name and email, only if you choose to enter them, or if the site owner asks for them before the chat starts.
• The address and title of the page where you opened the chat, and your browser type (for example, “Chrome on Mac”).
• A random anonymous ID so the chat can remember your conversation. It isn’t linked to your name unless you share it.
• If you fill in a ticket form: what you need help with, the topic and urgency you choose, your name and email, and any answers to the business’s own questions (like an order number).
• If you use your private ticket page: your replies, and whether you marked the ticket solved or rated it.
• If you use a community’s Ideas, Polls, Events or Updates tabs: ideas you share (and a name, if you add one), which ideas you vote for, your poll answers, the events you say you’re going to (and your name, if you’ve given one), and your emoji reactions. These are linked to the same anonymous ID as your chat. Approved ideas are visible to everyone who opens that community’s chat; your votes, answers and RSVPs are not shown publicly, only as totals. The team can see the names on an event’s RSVP list.
• If you apply to a community or to the Psstly team: your answers to its questions (which might include things like your age or experience), your name, email, and, if you apply through Discord, your Discord username and ID. The team you applied to can read your application, vote and comment on it, and decide on it. You get a private link to check its status or withdraw it.
• If you use a community’s Discord features through Psstly: tickets you open with /ticket (and replies you send with its buttons), giveaways you enter, points you earn or give with /thanks, and roles you pick from a role menu. These are linked to your Discord user ID and name. Your name and points can appear on that community’s leaderboard in Discord.
• If a community moderates its Discord server through Psstly: moderators can look up members, and warnings, timeouts, kicks and bans they make are logged with your Discord ID, name and the reason. Psstly can also show that community’s recent Discord audit log to its own moderators.
• If you apply: interview times you pick, messages you exchange with the team, and, if you’re accepted with a trial period, the team’s check-in notes about your trial.
• Chat status details: when you’re typing, when you’ve seen a reply, and the topic you picked, so the team can see them while the chat is open.
• If you report a chat: the reason and details you give, plus a copy of that conversation (messages, names and emails in it, the page it started on, and who on the team handled it). Reports go to the person who runs Psstly. The site owner isn’t told who reported it.

From Discord members who use /support

• Your question and any replies you send through the bot, your Discord user ID, username and display name, and which server and channel you used /support in.
• The bot only sees what you send through /support and its Reply button. It doesn’t read other messages in the server or your DMs.
• The team’s replies are sent to you as Discord direct messages. If your DMs are closed, the bot may mention you in the channel where you asked instead.

We don’t intentionally collect sensitive information like government ID numbers, financial account numbers, or health information. Please don’t send it in a chat.

How we use it

• To run Psstly: deliver messages, show the inbox and tickets, send automatic replies, and send notifications that a site owner turns on.
• To keep Psstly safe: prevent spam and abuse, and investigate problems.
• To respond when you contact us.
• To fix bugs and improve Psstly.

Emails

We send automatic emails from a noreply address. We never send marketing emails or newsletters, and we never sell or share email addresses for advertising. The emails we send are:

• Account emails, like password resets.
• Team alerts: people on a workspace’s team may get an email when a new ticket is made. Anyone can turn these off in their Profile.
• Customer emails: if you give your email to a business through its chat or a ticket, you may get a receipt when your ticket is made, replies the team sends to your ticket, and a note when the team replies in a chat you’ve left. These include the business’s name, and every one has a link to stop emails about that conversation.

Emails are delivered by our email provider, Resend. To deliver them, Resend receives the email address, the message and basic delivery information.

No session recording

Psstly doesn’t use session replay, screen recording, keystroke logging, or tracking pixels. The chat only saves the messages you choose to send. The “typing” indicator only shows that you’re typing, not what you type.

Who else can see it

• Site owners and their teams can see visitor chats, details, and tickets for their own workspace.
• Google Firebase (Google LLC) stores account and chat data and handles sign-in.
• Vercel (Vercel Inc.) hosts the website and runs the server code.
• Resend (Resend, Inc.) delivers the automatic emails described above.
• Discord (Discord Inc.) handles Discord sign-in, and delivers /support questions and replies. A site owner can also send alert summaries to a Discord channel.
• Slack, Discord, or other services a site owner connects. If a site owner turns on Slack, Discord, or webhook notifications, a short summary of new chats or messages is sent to the place they chose.
• The law. We may share information if required to by law, or to protect someone’s safety or the security of Psstly.

These providers may store data in the United States and other countries.

Cookies and browser storage

Full details, including every item we store, are in our Cookie Policy. Our fonts are hosted on our own site, so pages don’t contact Google Fonts.

Psstly doesn’t use advertising or analytics cookies. It uses your browser’s storage only to make things work: keeping you signed in, remembering your open chat and any name or email you entered, remembering whether you’ve seen the chat’s greeting, and saving dashboard preferences like alerts. You can clear this anytime in your browser settings; you’ll just be signed out and the chat will start fresh.

Applications

Applications to a community belong to that community: it decides how long to keep them and can delete them any time. If a community uses Discord features, Psstly’s bot may send you a direct message with the decision, give you a role, or lift a ban in that community’s server. Applications to join the Psstly team are only seen by our admins and staff who handle them, and we delete them within a year after a decision unless you join the team.

Private ticket links

Emails about your ticket include a private link to a page where you can see it and reply. Anyone who has that link can open the page, so please don’t share it. It shows your request and the replies sent to you, never the team’s internal notes. If you think a link was shared by mistake, email us and we’ll help.

Who on the Psstly team can see what

Psstly is run by an individual, who may be helped by a few trusted volunteers (“staff”). Admins can access everything needed to run Psstly. Staff only get the access their role needs, for example reviewing reports and the reported conversation, looking up a workspace’s settings and usage to help it, or changing a workspace’s plan. Staff can’t change platform settings or delete accounts. We keep a log of admin and staff actions, and keep private notes about workspaces we help. If a workspace asks to change plans, we keep that request and the name and email of the person who sent it.

Reports and safety

When a chat is reported, we keep a copy of the conversation with the report so we can review it fairly, even if it’s later deleted. Only Psstly admins can see reports. To investigate a report or abuse, admins may also view the related workspace’s conversations, tickets and public content. If a business is warned, its owner and managers see the warning in their dashboard, without the reporter’s identity.

We delete closed reports and their copies after 2 years, unless we need to keep a specific report longer for a legal reason or an ongoing safety issue. We may share information with law enforcement when the law requires it, or when we believe in good faith it’s needed to protect someone from harm, and we report apparent child sexual exploitation to the National Center for Missing & Exploited Children as U.S. law requires.

How long we keep it

We keep information while the account or workspace it belongs to exists, so site owners can look back at past chats and tickets. When you ask us to delete your account or a workspace you own, we delete it within 30 days, except where we must keep something to comply with the law or deal with abuse.

Security

We use reasonable safeguards to protect information, including encrypted connections (HTTPS), access rules that limit each workspace’s data to its own team, and providers with strong security programs. No system is perfectly secure. If a security breach affects your personal information, we’ll notify you as required by New York law, including the SHIELD Act.

Your choices

• See, correct, or delete: you can change your name and delete your account yourself in your Profile, and workspace owners can download or delete all of their workspace’s data on the Workspace page. You can also email support@psstly.app. Visitors can email us with the website and roughly when they chatted.
• Leave a team: support agents can leave a workspace from their Profile.
• Don’t share details: visitors can usually skip the name and email form, unless a site owner requires it.

We’ll respond within 30 days. If you live somewhere with additional privacy rights, such as the European Union or United Kingdom, you can use the same email to exercise them.

Do Not Track and Global Privacy Control

We don’t track you across websites, and we don’t sell or share personal information for advertising, so these browser signals don’t change anything. You’re treated the same either way.

Where this applies

Psstly is run from New York, United States, and information is stored with our providers in the United States and other countries. By using Psstly from outside the U.S., you understand your information will be handled there.

Children

Psstly isn’t meant for children under 13, and you must be 13 or older to create an account. We ask for your birth month and year when you sign up to check this; we don’t save them. We don’t knowingly collect personal information from children under 13. If you believe a child under 13 has given us information, email support@psstly.app and we’ll delete it.

Changes to this policy

If we change this policy, we’ll update the date at the top. For important changes, we’ll also show a notice in the dashboard.

Contact

Questions or requests: support@psstly.app. See also our Terms of Service.