Version 1 · last updated 2026-10-12
Privacy
This describes what Moi actually does with data today. It does not describe features we have not built.
What we store
Your email address. To sign you in and to let you recover your page.
What you type. Your name, what you do, your links, your projects. This is your page, so it is public by design.
How each thing is known. Every claim on your page carries whether you told us, whether it came from an account you connected, or whether we checked it. You can see this; so can anyone reading your page.
Your history. When you change something, the old version is kept rather than overwritten, so your page has a record rather than only a current state. Your export includes all of it. Erasing your account destroys all of it.
Visits to your page. We count views so you can see whether anyone is reading. We do not store IP addresses. We store a salted hash that changes every day and cannot be reversed, which lets us tell "three people on three days" from "one person refreshing", and nothing more. We do not track anyone across other websites, and there are no third-party trackers or advertising pixels on your page.
Subscribers, if you collect them. If you add an email signup section, the addresses people give you are stored for you and shown only to you. They are not part of your identity data and they are not in your export, because they are not yours to take.
Sign-in links. Single use, time limited, deleted after use.
Abuse signals. When a page is published we record a salted hash of the connecting address, the email domain, and why a publish was allowed or refused. This is how we stop spam. It is not used for anything else.
Enforcement records. If we act on an account we record what specifically caused it and who decided.
Who else sees it
Your page is public. Once it says something real it can appear in search results and be read by search engines and AI crawlers. That is the point of having a page. Machine-readable copies live at moi.me/yourname.json and moi.me/yourname.md, containing the same public information.
Our email provider delivers your sign-in and confirmation emails and sees your address.
That is the complete list. We do not sell data, we do not share it with advertisers, and we do not have any.
What we do not do
We do not use your content to train AI models. We do not run advertising. We do not build a profile of you from your browsing. We do not require your real name.
Keeping it
Your data stays while your account does. When you delete your page, you get everything back immediately, it goes offline at once, and after 30 days it is permanently erased and we send you a receipt.
Some things survive deliberately, and you should know which. Your handle is held for 12 months before anyone else can take it, so nobody can be mistaken for you. If we removed an account for abuse, a record of the reason and a one-way hash survive so the same person cannot immediately return. Nothing personal survives with it.
Your choices
See everything we hold: your export, any time, free. Correct anything: edit your page. Delete everything: from your dashboard, no email required.
Changes
If we change this materially we will tell you, and we record which version you agreed to.