Privacy Policy

1. Information you give murde.rs

2. Signing in

With an email address and password, your email is used to sign you in, to reset your password and, where required, to confirm your address. Those emails are sent by murde.rs's authentication provider. murde.rs doesn't send newsletters or marketing email.

When you sign in with Google or Discord, that service confirms who you are and shares basic account information with murde.rs's authentication provider, typically your account ID, email address, name and profile picture. murde.rs uses the account ID and email address to sign you in and to link sign-in methods to one account. It doesn't copy your Google or Discord name or picture onto your profile, it never receives your Google or Discord password, and it doesn't keep access to those accounts after you sign in. Whether signing in with Google or Discord can create a new account depends on whether sign-ups are currently open.

You can link and unlink Google and Discord in Settings.

3. Connected services

Widgets show information from other services. What murde.rs fetches and stores depends on the service. Connected services are separate companies, and their own privacy policies apply to them.

Disconnecting a service removes it from your profile. Some public details murde.rs fetched are kept in shared records tied to the other service's account rather than to your profile (see retention).

4. Public profile information

Anything you publish on your profile is public, and anyone can see it without an account. That includes your username, display name, bio, picture and background, your links, widgets and what they show, showcases, music, badges, featured friends and your public view count.

• Some details are part of every published profile's data even when your settings hide them from the page: your user number (UID), the date you joined, your view count and an internal account identifier. Hiding them changes what your profile shows, not whether they can be read.
• Published profiles with views may be listed on the public leaderboard with their username, display name, picture and view count, including when the profile hides its view count.
• Other people can feature your published profile on theirs without asking you. Their profile then shows your name, username, picture, view count, UID, join date and badges. If you unpublish your profile, it disappears from theirs.
• Your profile is also available at murde.rs's other domains (currently uwu.rip and finge.rs), in share cards when your link is posted, and possibly in search results.
• Notes can be public, unlisted or private. Public notes may appear in search results. Anyone with the link can read a public or unlisted note, even when your profile is unpublished. Private notes are only visible to you.

5. Profile views

When someone opens a published profile, murde.rs records a view containing:

• the profile and the time
• the device category (desktop, mobile, tablet, bot or unknown), worked out from the browser's user-agent string
• the hostname of the site the visitor came from, if their browser sent one (for example discord.com), never the full address
• a random identifier for the page load, so a view the browser sends twice isn't counted twice
• a visitor hash

The visitor hash is a one-way SHA-256 hash of the visitor's IP address, browser user-agent string and the current date (UTC). To make it, murde.rs's server processes the IP address and user agent of the request; neither is stored in the view record. Because the date is part of it, the hash changes every day. It is used to limit how many views one visitor can add to a profile in a minute and in a day, to protect counts from abuse. It isn't meant to identify anyone, but it is pseudonymous rather than anonymous: someone who already knew a visitor's IP address and user agent could compute the same hash for that day.

Visits from browsers that identify themselves as bots aren't counted. Within the limits above, every other page load is, including reloads and the owner's own visits.

A profile's owner sees totals and charts in their dashboard: views over time, clicks per type of link, referring sites and device categories, with a CSV export. The dashboard doesn't show countries or unique visitors. The owner can also access the underlying view and click records for their own profile, including the daily visitor hash.

The view count shown on a profile, unless the owner hides it, is public, and may include corrections made by murde.rs staff.

6. Link clicks

When a visitor clicks a social link or a link card on a published profile, murde.rs records the profile, which link was clicked and its type (for example “instagram”), the time, the device category, the referring site's hostname and the same daily visitor hash. The destination address isn't stored with the click. Other links on a profile aren't tracked.

7. Poll votes and reactions

If you vote in a poll without signing in, murde.rs sets a cookie holding a random token so it can recognise your vote later; only a hash of the token is stored with the vote. If you're signed in, your vote is stored with your account. A vote records which options were chosen and when. murde.rs doesn't show a poll's owner who voted. A poll's number of responses is public and, depending on its settings, so are its results. Your IP address is used briefly, in memory, to limit how fast votes can be sent, and isn't stored.

If you like or dislike a profile, your reaction is stored with your account if you're signed in. If you aren't, it's stored with a hash of the same random voter token, made with a secret key, so it can't be matched with your poll votes. A reaction records which one you chose and when. A profile's total likes and dislikes are public on it; murde.rs doesn't show the profile's owner or anyone else who reacted. Removing a reaction leaves an empty record, so that limits on how often reactions change still apply, until the profile or your account is deleted. If you react without signing in and later sign in on the same browser, that reaction becomes your account's. To limit abuse, murde.rs keeps a hash of your IP address and the date, made with a secret key, for up to two days, counting how many new reactions without an account come from a network to a profile; your IP address itself isn't stored.

8. Moderation and security records

murde.rs keeps information it needs to moderate and protect the service, including:

• a profile's moderation status (such as under review, restricted, banned or deactivated) and the reasons staff record
• internal staff notes about an account
• a log of the actions staff take on accounts, which can include usernames, email addresses and the reasons given
• usernames a profile has given up, and reserved usernames, including those held after deletion

These records aren't public. The only part shown publicly is the short reason a banned profile may display. murde.rs's hosting and database providers also keep their own operational logs of requests, which can include IP addresses.

9. How information is used

murde.rs uses information to:

• create accounts and sign you in
• save your settings and content, and show your profile
• process your uploads
• run the services you connect
• count views and clicks, and show you your analytics
• award badges, as described under information you give murde.rs
• prevent fraud, spam and abuse, moderate content and accounts, and keep murde.rs secure
• fix problems and keep the service working
• comply with valid legal obligations

murde.rs does not sell personal information or share it with advertisers. It doesn't show ads, doesn't use third-party analytics or tracking scripts, and doesn't send your information to AI services.

10. Cookies and browser storage

murde.rs sets its own cookies only for these purposes:

• Signing in. Session cookies keep you signed in. Another is used while you sign in with Google or Discord or reset your password.
• Poll votes and reactions. The random voter token described above, for up to a year.
• Connecting Spotify or Twitch. Short-lived cookies (10 minutes) that protect the connection and return you to the right page.
• Homepage drafts. If you start a profile on the homepage builder, your draft is kept in a cookie for a day.

The dashboard also saves a few layout preferences, such as the width of the preview, in your browser's local storage. A picture added to a homepage draft is kept in your browser's IndexedDB for up to a day. murde.rs doesn't use cookies for advertising or cross-site tracking.

11. Service providers

murde.rs runs on infrastructure from these providers, which process information on its behalf:

• Supabase: the database, authentication (including sign-in emails), file storage, live updates and scheduled jobs
• Vercel: hosting the website and serving its pages and optimised images
• a separate server operated for murde.rs that runs its Discord bot
• Cryptomus: taking premium payments. murde.rs sends it the price, the currency and an order number, and nothing about you; you pay on Cryptomus's own page

The services you connect, and those murde.rs uses to look things up (section 3), are separate services governed by their own policies.

12. Content loaded from other services

Profiles show images and media from other services. Apart from files stored by murde.rs and some Discord images, a visitor's browser loads these directly from the other service (for example Spotify, Apple, Last.fm, Steam, YouTube, Twitch, GitHub, AniList, Chess.com, Telegram, Roblox or Google Books), or from whatever address a profile's owner chose for an image, video or audio file. As with any web request, those services receive the visitor's IP address and browser information, under their own policies.

13. Uploaded files

Files you upload (pictures, backgrounds, videos, audio, artwork and poll images) are kept in public storage. Anyone who has a file's address can open it without an account, even if your profile is unpublished. Other people can't list or browse your files.

• Pictures (PNG, JPEG and WebP) are usually converted to a smaller WebP file in your browser before upload, which removes their embedded metadata. Files that aren't converted (GIFs, small images, videos, audio, and pictures the conversion wouldn't make smaller) are stored as uploaded, including any metadata such as camera details or location. Remove it first if that matters to you.
• Replacing or removing a file in the editor takes it off your profile, but the file itself stays in storage at its address until your account is deleted. Poll images are deleted with their poll.
• Files are served with long cache lifetimes, so copies can remain in browsers and caching servers for a while after they are deleted.

Don't upload anything sensitive or private as profile media.

14. When information is shared

Information is shared:

• when you publish it on your profile
• with the service providers that run murde.rs
• with other services at your direction, when you connect them or search them
• when murde.rs is required to by law, for example by valid legal process
• when reasonably necessary to protect people, murde.rs's rights or the security of the service

murde.rs does not sell personal information or share it with advertisers.

15. How long information is kept

murde.rs keeps information for as long as reasonably necessary to provide the service, keep it secure, keep moderation records, comply with legal obligations, resolve disputes and enforce its terms. Today that means:

• profile content, view and click records, poll votes and reactions are kept until you delete them or your account; there is currently no automatic expiry for analytics records
• moderation records and reserved usernames are kept after an account is deleted
• the days you used your dashboard are kept until you delete your account. Badges removed when murde.rs replaced its badge system in October 2026, including custom badges people made, are kept in a private recovery archive so that change can be undone, until it is no longer needed for that. Deleting your account removes yours from it
• some public details of connected accounts are kept in shared records tied to the other service's account rather than to your profile, such as a Last.fm, Roblox or YouTube account's public details and a Discord account's last relayed presence, and aren't currently removed when you disconnect or delete your account
• copies can remain in caches for a while

Deleting something removes it from normal use on murde.rs. It doesn't guarantee immediate, irreversible erasure everywhere.

16. Deleting your account

You can delete your account in Settings by typing your username and password. Because it asks for a password, an account that has only ever signed in with Google or Discord can't use it yet; to delete one of those, email legal@murde.rs from the address on the account.

Deletion happens straight away. It deletes your profile and its content, your uploaded files, your connections to other services and their stored tokens, your profile's view and click records, the votes you cast and reactions you left while signed in, the reactions to your profile, the friends you featured and your appearances in other people's featured friends, and your sign-in.

What remains:

• your username and any aliases, held so nobody else can claim them
• staff log entries and the record of the invite you used, with the link to your account removed. Log entries can still contain the username or email address recorded at the time
• the shared records described under retention, and a waitlist entry if you made one
• copies in caches, and the providers' own logs, for a time

If you only want to stop being visible, you can unpublish your profile instead and keep your account.

17. Security

murde.rs uses reasonable measures to protect information, including database access rules that limit each account to its own data, server-side checks on every change, encrypted storage of the Spotify and Twitch access tokens, and passwords handled by the authentication provider rather than stored in readable form. No system is perfectly secure, and murde.rs can't guarantee the security of information.

18. Children

murde.rs doesn't ask for or record anyone's age. As the Terms say, if the law where you live requires a parent's or guardian's permission for you to use a service like murde.rs, use it only with that permission. Because profiles are public, think carefully before putting a child's personal information on one. A parent or guardian who believes a child's information should be removed can email legal@murde.rs.

19. International processing

murde.rs's providers, and the services you connect, may process and store information in countries other than yours, whose data-protection laws may differ from those where you live.

20. Your choices and rights

You can:

• see and change your profile content in the dashboard
• hide individual links, keep notes private, or unpublish your profile
• disconnect connected services
• export your profile's configuration from Settings
• delete your account, where that control is available to you

Depending on where you live, applicable law may give you rights to request access to, correction of or deletion of certain personal information, or to object to or restrict certain processing. To make a request, email legal@murde.rs, from the address on your account if you have one. murde.rs may need to confirm that a request comes from the person it is about.

21. Changes to this policy

This policy may be updated as murde.rs changes. The date at the top shows when it last changed. murde.rs will make reasonable efforts to tell users about material changes, for example with a notice on the site.

22. Contact

Questions about this policy or how murde.rs handles information, and privacy requests: legal@murde.rs. Help with your account: support@murde.rs.