Privacy Policy

Last updated October 18, 2026

Goon Diary is meant to be anonymous. We don't ask for your name, we can't read the email you sign up with, and your diary stays private unless you post an entry. We don't sell your data.

This page covers what [OPERATOR NAME] ("we") collects when you use Goon Diary, what we do with it, and what you can do about it.

What we collect

The first time you visit, we make you a guest account with a random username so you can look around. A cookie ties it to your browser. We also save your settings: your username, whether your profile and totals are public, whether new entries get posted by default, and whether you browse Straight or Gay.

If you sign up with email, we don't save the address itself. We save a scrambled version (a keyed hash) that lets us match it next time you sign in, and it can't be turned back into your email. Your password is hashed too, so nobody can read it, us included.

If you sign up with Google, all Google tells us is an ID number for your Google account. We never get your name, email or photo, and we only store that ID in scrambled form.

Then there's what you put in yourself:

We also count visits so we know how the site is doing. For that we keep which days your account visited (for 90 days), and totals of how many times each page was viewed and which websites people came from. When you arrive from a link on another site, we keep just that site's name, like reddit.com, never the full address. This is all done by us, without any outside analytics company.

We don't collect your real name, a readable email address, your phone number, payment info or your location. Our app doesn't store IP addresses. Cloudflare, who hosts the site, does see them because that's how the internet works, and uses them to deliver pages and stop attacks.

What we do with it

We use it to run the site. That means showing you your diary and stats, keeping you signed in, showing the Feed, profiles and forum, and only showing you videos that match your Straight/Gay setting. We also use it to keep the place safe: dealing with reports, removing stuff that breaks the Terms, banning people, slowing down anyone guessing passwords, and reporting to NCMEC when the law says we have to.

We don't use your diary to target ads and we don't sell it.

Who sees what

Private entries are only visible to you, and so is the summary on every entry, even ones you post. Your username is public. So is anything you post: the entry's title, stats, orgasm timeline, tags, caption and links, plus your comments, forum posts and likes. Your profile page stays private unless you turn it on. If you have Plus, a badge shows next to your username. Awards on a post are public, but who gave them isn't.

Mods can see anything that's been reported so they can review it. Admins can also see visit counts and a list of accounts with their usernames and how much each has posted. The admin tools don't show anyone's private entries or summaries. We'll hand over information if the law requires it, and we report child sexual abuse material to NCMEC.

Other companies involved

Cloudflare hosts the site and the database.

Google is only involved if you sign in with Google.

Microlink (microlink.io) helps fill in titles and thumbnails. When you add a link, your browser sends that one video link to Microlink and nothing else. Microlink can see your IP address, the same as any site you visit.

Video sites. Thumbnails load straight from the site hosting the video, so that site can see your IP address. We don't tell them which page you were on. Our servers also visit those sites now and then to check whether saved links still work.

Ad networks. Ads run in a sealed-off box. The ad network can't see the rest of the page, your diary, your username or your account. It can see your IP address and what browser you're using, and it may set its own cookies to show and count ads. You can block or clear third-party cookies in your browser settings.

Cookies and storage

We use a cookie called sid to keep you signed in, for up to a year. During Google sign-in we set a second one, gstate, for 10 minutes as a security check. Your browser also remembers that you clicked "I'm 18 or older" until you close it, and if you're using the live timer it saves the running time on your device so a reload doesn't wipe it.

Our visit counts use the same sid cookie. We don't have any other tracking cookies or outside analytics.

How long we keep it

Your diary, vault and posts stay until you delete them or ask us to delete your account. When you delete something it's gone from the site right away, though it can sit in our database backups for up to 30 days. Stuff removed by mods, and reports, may be kept longer for safety and legal reasons. Failed sign-in attempts are forgotten after 15 minutes. The record of which days your account visited is deleted after 90 days. Page view and referral totals are kept, but they aren't tied to anyone.

Your choices

You can change your privacy settings on the Profile tab, download all your data from Profile → Your data, and edit or delete any entry, post or comment whenever you want.

To delete your whole account, email [CONTACT EMAIL] with your username. Since we can't read your sign-up email, we'll need you to prove the account is yours, for example by changing your username to a code we send you. After that we delete the account and everything in it.

Depending on where you live (the EU, the UK and California, for example), you may have extra rights, like getting a copy of your data, correcting it, deleting it or objecting to how it's used. Email us and we'll answer within the time the law gives us. We don't sell personal information.

Adults only

Goon Diary is for people 18 and over. We don't knowingly collect anything from anyone younger, and if we find out an account belongs to a minor, we delete it.

Security

We store as little as we can. Connections are encrypted, emails and Google IDs are only kept scrambled, passwords are hashed, and scripts on the page can't read the sign-in cookie. Nothing online is 100% secure though, so use a password you don't use anywhere else.

Where your data goes

Cloudflare has servers all over the world, so your data might be handled outside your country, including in the US.

Changes

If we change this policy we'll update the date at the top, and put a notice on the site if it's a big change.

Contact

[CONTACT EMAIL]