Privacy Policy

Last updated: September 26, 2026

My25 is a small, independently run site for sharing lists of your favorite things. This page explains what we collect, what's public, who else is involved, and how to delete your data. The short version: we collect only what the site needs to work, we don't show ads, we don't use tracking or analytics services, and we never sell your information.

What we collect

  • Your account: your email address, username, and password. Passwords are stored only as a secure one-way hash; we can't see them.
  • What you create: your profile (avatar, tagline, bio), your lists and the items in them, notes you add, and any list art you draw.
  • Feedback and feature requests you send, and your votes on proposed features.
  • Contact form messages: your name, email address, and message, which are emailed to our support inbox.
  • Settings: the color theme you pick, so it follows you to other devices.
  • Activity: the date you last used the site while signed in, used only to count how many people are active.
  • Abuse protection: when you sign in, request a password reset, or send a contact message, scrambled (hashed) forms of your IP address and of the email or username entered are kept for up to a day, to limit repeated attempts. The IP address itself isn't stored.

What's public

My25 is for sharing, so your profile (username, avatar, tagline, and bio) and any list you publish are visible to anyone, including the items and notes in those lists. Unpublished lists are visible only to you. If a feature you suggest is added to the Features page, your username is shown with it. Your email address is never shown to other people.

How we use it

We use your information to run the site: to sign you in, to send your account verification email and any password reset links you ask for, to show your lists, to reply to your messages and feedback, and to prevent spam and abuse. We don't send marketing email, we don't show ads, and we don't sell or rent your information to anyone.

Cookies and browser storage

We use two cookies, both needed for signing in: a session cookie and a sign-in cookie. Your browser also remembers your color theme and whether you're in list-edit mode. We don't use advertising or tracking cookies.

Other services we rely on

  • Hosting and email: the site and its email run on Bluehost.
  • Looking up titles: when you search for something to add, our server sends your search words (never your account details) to the service that provides that kind of content: IGDB for video games, TMDB for movies and TV, BoardGameGeek for board games, Deezer for music, Google Books for books, Google Places for places, Wikipedia for articles, and YouTube for videos and channels. YouTube lookups use YouTube API Services, subject to the YouTube Terms of Service and the Google Privacy Policy.
  • In your browser: pages load fonts from Google Fonts, and cover images and thumbnails directly from those services' image servers. Like any website you visit, those services can see your IP address and basic browser information, under their own privacy policies. Maps on place pages load from Google Maps only when you click Show map.

Keeping and deleting your data

We keep your information for as long as you have an account. You can delete your account at any time from the bottom of your profile page. That permanently removes your account, profile, lists, notes, art, feedback, and votes. Features you suggested stay on the Features page, since others have voted on them, but without your name. Copies may remain in our hosting provider's backups for a short time before they're overwritten, and messages you sent through the contact form stay in our support inbox. If you can't sign in and want your account removed, contact us.

Security

The whole site uses HTTPS, passwords are stored only as secure hashes, and access to the database is limited to what the site needs. No system is perfectly secure, but we take reasonable care to protect what you share with us.

Children

My25 isn't intended for children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has created an account, let us know and we'll delete it.

Changes to this policy

If we change this policy, we'll update this page and the date at the top. For significant changes, we'll also post a notice on the site.

Contact

Questions about your privacy or this policy? Contact us.