Legal

Privacy policy

Last updated 24 August 2026

The short version. There is no account, no email address and no password. Your screenshots stay attached to your own scan and are never public unless you publish them yourself. We do not sell data, we do not run ad tracking, and you can export or erase everything from inside the app at any time.

This policy describes how Overreacting (“we”) handles personal data in the Overreacting mobile app and on this website. It applies to the app on iOS and Android and to the public voting pages under /c/.

1. What we collect

Data	Why	Basis
A random device identifier generated on first launch	To keep your scans and posts attached to your device without an account	Necessary to provide the service
An anonymous handle in the form `anon-1234`	So other people can tell two posts apart in the feed	Necessary to provide the service
Screenshots you upload, and the message text read out of them	To produce the report you asked for	Your request
Scan results: flag score, matched patterns, summary, trait readings	So you can reopen a past scan	Your request
Posts, answers, votes and reports you submit	To run the community feed and moderation	Your request
Subscription status and which store granted it	To unlock the paid features you bought	Performance of a contract

The website itself collects nothing. It has no analytics, no cookies and no login — a published chat can be read there without us learning anything about the reader.

We do not ask for your name, email address, phone number, date of birth or payment details. Payments are handled entirely by Apple and Google; we only ever see whether a subscription is active.

2. Screenshots

A screenshot leaves your phone only when you start a scan. It is uploaded over HTTPS and stored with that scan on our servers, so the scan can be reopened and — if you decide to — published later. It stays private to your device until you publish it, and it is destroyed when you erase your data.

Before anything is published you paint over names and faces yourself. That paint is burned into the image file, not layered on top of it: the unblurred pixels are destroyed, and the original is not kept.

3. AI processing

To read a chat we send your screenshots and the extracted message text to OpenAI, which acts as our processor. We use their API, where content is not used to train models. Published posts are additionally passed through OpenAI’s moderation endpoint to catch sexual content involving minors, threats and other material that must not appear in a public feed.

The result is a pattern analysis, not a diagnosis, and no decision with a legal or similarly significant effect is made about anyone automatically.

4. Publishing to the community

Publishing is always your choice and never automatic. A published chat shows your anonymous handle, your blurred screenshot, the votes it collects and the answers people write. It is visible to anyone with the link, including people who do not have the app.

Remember that a chat contains someone else’s words. Do not publish anything that identifies another person, and blur every name, handle, face and phone number before you post.

OpenAI — analysis and moderation of the content you submit.
Apple and Google — subscription billing and receipt validation. They give us an entitlement, not your payment details.
Our hosting provider — the servers and database that run the service.
Anyone with the link — but only for the chats you deliberately published.

We do not sell personal data, do not share it with data brokers, and do not run advertising or cross-app tracking SDKs in the app.

6. How long we keep things

Uploaded screenshots: kept with the scan they belong to, and destroyed when you erase your data.
Scan results: kept until you erase your data.
Published posts, answers and votes: kept until you delete the post or erase your data.
Content removed by moderation: the record of the removal is kept so the same content is not re-published.

7. Your rights

Because there is no account, the app is the only place that can prove a device is yours. Both controls live in Settings → Your data:

Export my data — a machine-readable copy of everything attached to your device.
Delete everything — erases your scans, posts, answers, votes and the device identity itself. This cannot be undone, and it does not cancel a subscription; cancel that in the App Store or Play Store.

If you are in the EEA or the UK you also have the right to object to processing, to restriction, and to complain to your local supervisory authority. In California you have the right to know, delete and to not be discriminated against for exercising those rights; we do not sell or share personal information as those terms are defined by the CCPA.

8. Children

Overreacting is not directed at children. You must be 13 or older to use it, and 16 or older where local law requires that age for consent. If we learn that content was uploaded by a child below that age, we remove it.

9. Changes and contact

If this policy changes in a way that materially affects you, the app will tell you before the change takes effect. Questions, requests and complaints: [email protected], or see the support page.