Bffable is a private, invite-only place to share writing. This page says what it stores, who can see it, and how to take it back or delete it.
There are no ads, no analytics, no tracking pixels, and no third-party scripts on this site or in the apps. Nothing about you is sold, rented, or handed to anyone for marketing.
What Bffable stores
Your account. Your email address, your username and display name, the language you chose, and the look of your typewriter key. The email address is used to sign you in and to answer you if you write to us. It is never shown to other members.
What you write. Pieces, drafts, comments, and reactions, kept as you wrote them. Drafts are visible only to you until you publish them into a circle.
Your circles. Which circles you belong to, your role in each one, when you joined or left, and any persona you set (a display name and key that apply inside a single circle).
Invites. Invite codes, who created them, and which account each one admitted. This record is what keeps the network invite-only.
Images. Anything you upload goes to private storage and is served only to members of the circle it belongs to. Files are kept as you sent them, so metadata inside them, such as camera or location data, is kept too. Strip it before uploading if you would rather not share it.
Sign-in and technical records. Each active session records an IP address and a browser or app identifier so you can tell your devices apart and end sessions you do not recognise. Short-lived counters keyed to an IP address enforce the limits on requesting sign-in codes, posting, and reporting. Sign-in codes and links expire within minutes and are consumed on first use. If you add a passkey, we store its public key and the identifiers your device needs to use it again.
Who can see your writing
Only the members of the circle you published into. There is no public feed, nothing is indexed by search engines, and nothing crosses from one circle to another. Images sit behind the same membership check as the writing.
Moderators of a circle can hide a piece or a comment inside that circle. When you report something, the report goes to those moderators. It does not go to a platform review team, because there isn't one.
Whoever operates Bffable has technical access to the database, as is true of any hosted service. That access exists to keep the service running, to fix what breaks, and to act on reports.
Services Bffable relies on
- Cloudflare hosts the site, the app, the API, the database, and file storage, and delivers sign-in email. Cloudflare Turnstile checks that sign-in requests from a browser come from a person; it sees the request's IP address.
- Apple and Google distribute the mobile apps and confirm that a copy of the app is genuine before it may request a sign-in code. That check reports on the app and the device, not on you.
That is the whole list. No other company receives your data.
What you can do
- Export. Settings gives you a zip of everything you have written, as plain markdown files, whenever you want it.
- Edit or delete your own pieces and comments.
- Leave a circle, choosing whether the writing you posted there stays behind or goes with you.
- Delete your account. Your drafts, notifications, sessions, and passkeys are deleted outright. Your invites are revoked. Your email address and display name are erased from the account record. For each circle you belong to, you choose whether your published writing stays or is withdrawn. Your username stays reserved so that writing you chose to leave behind keeps its attribution and nobody can take your name later.
How long things are kept
Your account and your writing are kept until you delete them. Sessions expire on their own and can be ended sooner. Rate-limit counters last minutes to an hour. Sign-in codes and links expire within minutes. Deleted drafts, notifications, and account details are removed from the live database immediately; encrypted infrastructure backups may hold copies for a short period after that before they roll over.
Age
You need to be at least 13 to use Bffable. If you live in the European Economic Area or the United Kingdom and your country sets a higher age for consenting to online services, that higher age applies to you.
Where your data lives
Bffable runs on Cloudflare's network, so data may be stored and processed in countries other than yours, including the United States.
Changes
If this page changes in a way that affects you, the date at the top changes and members are told in the app before the change takes effect.
Contact
Questions, requests for a copy of your data, or requests for deletion: hello@bffable.com.