Privacy

MoreWrong is a public, unaffiliated parody publication. Anyone can read articles and comments without an account. This notice describes the site as configured for this release.

Accounts and sign-in

You may sign in through passwordless email or ChatGPT. Auth0 processes the email authentication flow. OpenAI/ChatGPT Sites processes legacy ChatGPT authentication and hosts the application. MoreWrong stores a stable internal user ID plus the provider name and provider-specific subject needed to recognize linked sign-in methods. A verified email may be stored for authentication and an optional mailing-list request. MoreWrong does not store passwords, OAuth access tokens, refresh tokens, or provider secrets.

Sign-in uses a secure, HTTP-only session cookie. The browser also stores a thumbnail preference locally. The site counts pageviews with a first-party, cookieless request after pages load. The owner-only dashboard stores aggregate counts by UTC day and page label, referring domain, and available referring host and page path paired with the MoreWrong destination page. When a browser shares a referring URL, its subdomain and page path may be included; browsers often provide only a host. Query strings (including search terms and campaign parameters), fragments, URL credentials, and obvious account, authentication, conversation, or token-like paths are removed in the browser before the analytics request and checked again by the server. Sensitive paths are counted with only the host. Referrals are reported by browsers and are not independently verified backlinks. Internal navigation and direct or unknown sources are counted separately. Older views without source information are marked as not recorded. Analytics does not store IP addresses, unfiltered referral URLs, or visitor identifiers and does not build individual browsing histories. Owner visits, Do Not Track, Global Privacy Control, and recognized bots are excluded. Counts older than 90 days are pruned on the first analytics activity of each UTC day in a server instance. To limit repeated requests, the server briefly keeps a salted, minute-specific hash of the network address in memory; this is cleared at the next active minute and is not stored with analytics. The owner editor may keep unsaved article text in this browser tab’s session storage until saved or discarded. There are no advertising pixels or third-party analytics.

Profiles, comments, and moderation

Your username, display name, bio, approved comments, and comment timestamps may be public. Comments are public content. Pending or removed comments, reports, block/trust status, votes, and account identifiers are visible only where needed for account operation or owner moderation. Comments are text only: public accounts cannot upload files, images, avatars, or embeds.

Optional email updates

Email updates are available. The mailing list is optional, unchecked by default, and separate from account creation and security email. A subscription remains pending until you confirm it. Resend receives the minimum email-delivery data needed to send confirmation and future updates. Every marketing message must use the stored one-click unsubscribe link; unsubscribing does not stop authentication or security email.

Retention and control

Account records are kept while your account is active. Expired authentication transactions and rate-limit counters are short-lived. Session records expire or are removed when revoked. Application and hosting logs should be retained only for the operational period configured by the owner and must not contain tokens, passwords, or complete request bodies.

You can download a machine-readable copy of your profile, provider names, mailing preference, comments, votes, and reports from Account. Deleting your account revokes sign-in methods and sessions, removes private profile fields, suppresses the mailing-list address, and anonymizes retained discussion comments as [deleted]. Private backups and narrow security records may persist for a limited recovery or abuse-prevention period.

Questions

For privacy, access, or deletion questions, contact privacy@gaysex.biz. Infrastructure providers may process requests and logs in locations governed by their own systems; MoreWrong does not promise that data remains in a particular country or region.