Privacy

What is stored

• Your username, display name, email address and a hash of your password. The password itself is never stored.
• Your Tweets, favorites, retweets, follows, Lists and uploaded media.
• Your Direct Messages. They are private between participants, and their contents are never written to the server logs.
• Sign-in attempts (identifier, IP address, success or failure) so brute-force attempts can be slowed down.
• Administrative actions, in an audit log.

Who can see it

Public Tweets are visible to anybody, signed in or not. A protected account's Tweets are visible only to approved followers. Administrators of this server have database access, as with any self-hosted service.

Cookies

Twiq sets one cookie: a session identifier. It is HttpOnly and SameSite=Lax. There is no advertising and no third-party analytics in this software.

Deleting your account

Account settings has a delete option. It removes your profile, Tweets, messages and Lists from the database. Backups taken before the deletion are the operator's responsibility.