Privacy Policy
What we collect
When you use Mental OS Overwrite, we store the data described in §2 of our Terms of Service: your username, optional email, password hash, optional display name and bio, and the in-app activity you generate (overwrites, sprints, tasks, diary entries, favorites, friend connections, thumbs, votes on lens submissions, and aggregate counters).
How we use it
Activity data drives the leaderboards, your personal stats, and the unlock thresholds for themes, animations, and companions. Aggregate counts (e.g. how many users ran a given program) are shown publicly and never tied to a specific user.
What stays private
- Diary entries are visible only to you. Admins do not read individual entries; nothing about diary content surfaces in any leaderboard or feed.
- Tasks you type during overwrites are visible only to you.
- Email is never displayed publicly. See §3 of the TOS for our policy on email transfer in the event of a sale of the site.
- Password is stored as a one-way bcrypt hash. We can't read it, even if we wanted to.
What's public
If you have a public profile (default; you can disable in settings), the following is visible to everyone: your username, display name, bio, avatar, programs you've authored, activity counters (overwrites, sprints, focus points, streaks), thumbs received, theme/animation/companion choices, and your position on leaderboards. None of your private data (diary entries, tasks, email, password, friend list) is exposed by these surfaces.
Cookies and sessions
We use a single PHP session cookie to keep you logged in. We do not use third-party tracking or analytics cookies. We do not sell your activity to ad networks.
Third parties
The site does not load fonts, scripts, or analytics from third parties at runtime — only Google Fonts for typography (which sees only your IP address and User-Agent string when fetching the font files). No advertising trackers, no behavioral analytics, no fingerprinting libraries.
Your rights
You can:
- Edit or delete your bio, display name, email, and avatar anytime in Profile settings.
- Delete your account anytime via Profile → Settings → Danger zone. Deletion is immediate and cascades to your tasks, diary entries, friend connections, thumbs, and theme unlocks. Programs you authored remain on the site under the license granted in TOS §4 with your name removed.
- Mark your profile non-public so it does not appear on leaderboards or in friend search results.
- Request a copy of your data — admins can run the export
from
/admin/export.php.
Children
The site is not intended for users under 13. If we learn that a user is under 13, the account will be deleted.
Contact
For privacy-related questions or requests, send a message via the feedback form.
Changes to this policy
We may update this policy at any time. Continued use of the site after a change means you accept the updated policy.