Privacy Policy
Last updated: March 17, 2026
The Short Version
We built HeyBoss.wtf for people who need anonymity to tell the truth. We'd be hypocrites if we tracked you. Here's exactly what happens with your data — no legal fog, no fine print tricks.
1. What We Collect
Barely anything. Here's the full list:
Visitor ID
A random CUID2 string generated in your browser and stored in localStorage. This is how we know you're "you" across visits — without knowing who "you" actually are.
Nickname
A randomly generated alias (e.g. "ShadowWorker42") stored in our database. You can change it anytime. It's never linked to your real identity.
Content you post
Comments, replies, skull ratings, and reactions. These are public by design — that's the whole point.
Theme preference
Light or dark mode, stored in your browser's localStorage. We won't judge your choice. (Dark mode, obviously.)
2. What We Don't Collect
This is the important part:
- ✗No email addresses
- ✗No real names
- ✗No phone numbers
- ✗No IP addresses logged by us
- ✗No location data
- ✗No device fingerprinting
- ✗No third-party trackers or analytics pixels
We don't have accounts. We don't have a sign-up form. We don't have a "forgot password" page. There's nothing to forget because we never asked.
3. localStorage (Not Cookies)
We don't use cookies. Instead, we use your browser's localStorage to store:
- •Your visitor ID (so the site recognizes you)
- •Your theme preference (light/dark)
localStorage never leaves your device. It's not sent to our servers with every request like cookies are. You can clear it anytime in your browser settings — you'll just get a new random visitor ID next time.
4. Cloudflare (Our Infrastructure)
HeyBoss.wtf runs on Cloudflare's infrastructure (Workers, D1, R2). Cloudflare may process standard connection metadata (IP addresses, headers) as part of delivering the site to you. This is standard for any website — your ISP sees more than we do.
We also use Cloudflare Turnstile for spam protection on forms. Turnstile analyzes browser signals to tell humans from bots — without CAPTCHAs and without tracking you across sites. It does not use cookies or collect personal data.
5. Where Your Data Lives
Your content (comments, replies, ratings) is stored in Cloudflare D1 databases. Uploaded files go to Cloudflare R2 storage. Both are encrypted at rest. Your visitor ID links your content together, but since we don't know who's behind that ID, it's just a random string in a database.
6. How Long We Keep Data
Content stays up as long as it isn't removed by moderation. If you clear your localStorage, we can't match you to your old posts — and neither can anyone else. The visitor record stays in the database but becomes an orphan with no way to trace it back to you.
7. Third Parties
We don't sell, share, or give your data to anyone. Period. The only third party involved is Cloudflare for hosting and spam protection. No Google Analytics. No Facebook Pixel. No ad networks. No data brokers.
8. Your Rights
You can:
- ✓Clear localStorage to reset your visitor identity
- ✓Change your nickname anytime
- ✓Request content removal by emailing us
Since there are no accounts, there's no "delete my account" button. Your anonymity IS the privacy feature.
9. Children's Privacy
HeyBoss.wtf is not intended for anyone under 16. We don't knowingly collect data from minors. If you're under 16, please don't use this site. (Also, you probably shouldn't be worrying about toxic bosses yet.)
10. Changes to This Policy
If we change how we handle data, we'll update this page and the date at the top. We'll keep it honest and readable. No surprises.
Questions about your privacy?
If anything here concerns you, reach out.
admin@heyboss.wtf