Privacy Policy

Last updated: April 2026

This Privacy Policy describes how Maskr ("we", "us", or "our") handles information when you use maskr.space and related services. We have written it to be as plain and short as possible.

What we collect

  • Public key — your Nostr public key (npub / hex) is the identifier associated with all of your activity on Maskr. It is, by design, public.
  • Passkey-protected keys — if you register with a passkey, an encrypted copy of your private key (nsec) is stored on our servers. It is encrypted with a key derived from your passkey and cannot be read by Maskr.
  • Relay metadata — when you publish events, we record which relays received them so we can display your content reliably.
  • Basic analytics — we collect aggregate, anonymised usage data (page views, feature usage) to understand how the product is used. This data is not linked to individual users or public keys.
  • Transient server logs — standard web server logs (IP address, timestamp, HTTP method, path) are retained for a short period for security and rate-limiting purposes, then deleted.

What we don't collect

  • Real name
  • Email address
  • Phone number
  • Precise or coarse location data
  • Browsing history outside of maskr.space
  • Advertising identifiers
  • Biometric data (passkey authentication is handled entirely on-device)

Data sharing

We do not sell, rent, or share your data with advertisers or data brokers. We may share data only in the following limited circumstances:

  • Infrastructure providers — we use third-party services (hosting, database, caching, media storage) to operate Maskr. These providers process data only as instructed by us and under data processing agreements.
  • Legal requirements — if required by law, court order, or government authority, we may disclose information. We will notify you if legally permitted to do so.
  • Public Nostr network — content you publish (posts, profiles, follows) is broadcast to Nostr relays and is publicly readable by anyone. This is the nature of the Nostr protocol.

Data retention

We retain account-related data for as long as your account is active. If you delete your account, we remove your data from our systems within a reasonable period. Note that content published to external Nostr relays may persist on those relays independently of your Maskr account; deletion from Maskr does not guarantee deletion from all relays.

Your rights

Depending on your jurisdiction, you may have the right to access, correct, or delete personal data we hold about you. To exercise these rights, contact us at info@maskr.space.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of Maskr after changes are posted constitutes acceptance of the updated policy.

Contact

Questions or concerns about this policy? Reach us at info@maskr.space.

15 of 21