@mckinley (#yzslitq) We don’t store email at all as of some time ago! Yhanks for pointing this out I’ll amend that doc ASAP 🤗

@mckinley (#yzslitq) Fixed in 67af1d2 Thank you! 🙇‍♂️

(#yzslitq) @prologic Thanks for clarifying. Either way, it's a very reasonable privacy policy. I was just wondering about the details. If you don't store the email addresses, is it just a hash that's stored? Check against it for recovery, send an email if it passes?

@mckinley (#yzslitq) That's 100% correct. That's exactly what we do. We just store a SHA256 of the email you signed up with. if you forget your password, you give us your username and email, if we find a matching hash, we'll send you a recovery token. If you loose access to or forget your username/email, well too bad, we cannot literally help you! like at all :/

(#yzslitq) @prologic I really like that. Email can't be known until it's needed.

@mckinley (#yzslitq) Yup! 👌