Skip to main content

A home for humanity’s voice

Every country. Every context.

Not built for algorithms or governments. Arkora is open to every verified human on earth - whether you’re posting from a major city or a conflict zone. The only requirement is being real.

Back

Privacy Policy

Last updated: February 2026

1. Overview

Arkora is a provably human anonymous message board built as a World App miniapp. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

  • World ID nullifier hash - A one-way cryptographic identifier derived from your World ID proof. It cannot be reversed to reveal your biometric or personal data. We use it to enforce one-account-per-human and to associate your posts, votes, and preferences.
  • Wallet address - Your EVM wallet address, used for signing in via SIWE and for receiving WLD tips and subscriptions.
  • Content you create - Posts, replies, polls, and direct messages you send on Arkora. DMs are end-to-end encrypted; we store ciphertext only and cannot read their contents.
  • IP country code - Inferred from your IP at post creation time, used to power the Local feed feature. We do not store raw IP addresses.
  • Optional profile data - Display name (pseudoHandle), bio, and avatar image, if you choose to set them.
  • Optional GPS coordinates - Only if you enable location sharing in Settings. Stored per-post, not continuously tracked.
  • Session cookies - httpOnly cookies ("arkora-nh" and "wallet-address") used to authenticate your session. They expire after 30 days of inactivity.

3. Data We Do Not Collect

  • Your name, email address, or phone number
  • Biometric data - World ID proofs are verified by Worldcoin and we only receive a nullifier hash
  • Raw IP addresses (only country code is inferred and stored)
  • DM plaintext content - all DMs are E2E encrypted client-side

4. How We Use Your Data

  • To authenticate you and prevent duplicate accounts (Sybil resistance)
  • To display your posts, replies, and profile to other users
  • To power feed personalization, notifications, and local feed features
  • To calculate karma scores and reputation tiers
  • To detect spam and policy violations via report counts

5. Third-Party Processors

  • Vercel - Hosting and serverless compute. Processes requests and stores logs for up to 7 days.
  • Neon (Postgres) - Database. All data is stored encrypted at rest with 7-day automated backups.
  • Pusher - Real-time notifications and room messaging.
  • Hippius S3 - Decentralized file storage for uploaded images.
  • Worldcoin - World ID proof verification and push notifications. Worldcoin's own privacy policy governs how your biometric data is handled by them. Notification content (e.g. "You received a tip") is transmitted through Worldcoin's push notification infrastructure.

6. On-Chain Data

Certain data associated with your activity is recorded on World Chain (a public blockchain) and is therefore permanent and publicly visible. This includes:

  • Your nullifier hash may be registered on-chain for Sybil resistance
  • WLD tip, subscription, and skin purchase transactions are recorded on-chain with sender and recipient wallet addresses
  • World ID verification proofs are validated against on-chain smart contracts

On-chain data cannot be deleted or modified. This is inherent to blockchain technology and persists even if you delete your Arkora account.

7. Data Retention

We retain your data for as long as your account exists. If you delete your account, your profile data is immediately removed and all your posts and replies are anonymized (the link between your nullifier hash and the content is broken). Backups may retain anonymized data for up to 7 days after deletion.

8. Your Rights (GDPR / CCPA)

You have the right to:

  • Access - request a copy of the data we hold about you
  • Rectification - update your display name or bio in the app
  • Erasure - delete your account via Settings → Delete account
  • Portability - contact us to request an export of your data

To exercise these rights, delete your account in-app or contact us at the address below. We will respond within 30 days.

9. Children

Arkora is not directed at children under 13. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy. The "Last updated" date at the top reflects the most recent revision. Continued use of Arkora after changes constitutes acceptance.

11. Contact

For privacy inquiries or data requests, email us at support@arkora.app. You may also open an issue at our public repository. We will respond within 30 days.

Terms of ServiceBack to Arkora