Privacy & security
SOVEREIGN is designed to minimize collection and make audience choices clear. This initial cPanel release is a functional social application, not a complete zero-knowledge system.
What this release stores
The database stores your username, display name, bio, password hash, posts, comments, likes, follow relationships and basic timestamps. Login rate limiting stores keyed hashes of the username and IP address with attempt timestamps. Image uploads are re-encoded to JPEG and stored outside the public web directory when the hosting layout is configured as documented.
What we do not currently provide
This release does not provide end-to-end encrypted messages, client-held recovery keys, encrypted private posts, anonymous network routing, browser-hosted permanent storage or a decentralized global feed. The PHP server can access account and social database records. Do not assume server operators are cryptographically unable to read this data.
Images
Supported uploads are decoded and re-encoded to JPEG using PHP GD. This process removes common embedded metadata from the output, but it is not a forensic guarantee against every form of identifying information. Do not upload images containing content you cannot safely disclose.
Cookies and logs
The application uses a session cookie required for authentication and CSRF protection. It does not include advertising trackers or third-party analytics. Hosting providers may independently retain web server access logs under their own policies.
Your responsibilities
Use a pseudonym, choose a unique password, avoid posting sensitive personal data and remember that public content can be copied by others. Account recovery is not currently available; losing your password means losing access to the account.
Last updated: October 2026. This page is a technical product notice, not legal advice or a substitute for a jurisdiction-specific privacy policy.