Privacy

Signing in uses X’s OAuth. We ask X for read access to your public profile only. We cannot post as you, read your private messages, see who you follow, or do anything else with your account.

X hands back an access token. We use it once, to read your profile, and never write it down — not in a database, not in a log, not in a cookie.

From that profile we keep six things:

• Your X user id.
• Your handle.
• Your display name.
• The URL of your profile picture — the image stays on X's servers; we only store the link.
• The date your X account was created.
• Your follower count at the moment you signed in.

The last two are there for one reason: a place counts toward somebody’s referrals only if the account is at least 30 days old and has at least 10 followers. That is a rule against farming, and it is checked once, when you sign in. We do not re-read your follower count afterwards.

• When you first signed in.
• Whether you said you followed @numencash.
• The link to the post you submitted, if you submitted one, and whether X confirmed you wrote it.
• Your own referral code, and the id of whoever referred you, if anybody did.
• Your light number, once a light is confirmed.
• If a place is declined: that it was, when, and the reason written by whoever declined it.

The referral link is one-directional and set once: we record who sent you, and it never changes afterwards, even if you sign in again.

Your record has no expiry date. We are not going to invent one here to sound tidy: it stays until somebody removes it, and you can ask us to remove it.

Five, all strictly necessary, none for advertising and none shared with anybody. There is no analytics on this site — no trackers, no pixels, no third-party scripts measuring you.

• numen_light — your sign-in session.
• numen_pass — pre-launch access, if you were given the key.
• numen_control — only ever set for an administrator.
• Two handshake cookies during sign-in, gone within ten minutes.

All of them are httpOnly, which means the page’s own JavaScript cannot read them, and none of them can be read by another site.

Some of what you give us is meant to be seen. The arch shows the handles of the most recently confirmed lights. The share card carries your handle and your light number. If you post one, that post is public because you made it public.

Your X user id, your referral code, who referred you, your follower count and your account age are never shown to anybody but us.

• Vercel hosts the site, so it handles every request and sees IP addresses as part of serving them.
• Upstash stores the records above.
• X sees the sign-in itself, and sees your browser when it loads a profile picture, because that image is served from X and not from us.

Nobody else. We do not sell anything, share anything for advertising, or send your data anywhere it is not listed above.

Signing out clears your session but leaves your record. To have the record itself removed, write to us and say so. If you hold a confirmed light, removing your record gives up the number — numbers are handed out once and are never reused.

Questions, corrections, or a request to be removed: hello@numen.cash.

The site is not for anyone under 13, and X’s own minimum age applies before ours does.

This page changes when the code does. The date at the top is when it last did.