Privacy
Last updated October 6, 2026
Frienduit is where ThoughtJunkie maps get shared. We keep what the site needs to work and nothing else. We don't sell your information, show ads, or use tracking cookies.
What we keep
- Your account: your email address (for sign-in links and messages about your account), your username, your Frienduit number (a random 9-digit number given to every account; it never changes), and anything you add to your profile (bio, picture link, music link, colors).
- What you publish: the maps you publish from ThoughtJunkie with the visibility you choose (public, unlisted, friends, a group, or private), plus comments, suggested edits, likes, bookmarks, follows, groups, group chat messages, co-op sessions and reports you make.
- Sign-in sessions: each time you sign in we store a session with the browser name and IP address it came from, so you can see and end your sessions from your profile.
- Abuse protection: the IP address a map was published from, and short-lived counters (kept for up to 2 days) that stop spam and brute-force attempts.
- Sparks, Gems and purchases: your balances, what you bought or earned, and a record of each payment (which pack, the amount, and Stripe's reference numbers).
- AI features: how many AI requests you've used this month.
- Comms (contacts and messages): your contacts and contact requests, people you've blocked, the status and status message you choose, when you were last online, your direct and group-chat messages, reports you make, and your notifications. Messages are kept on our server so they reach you on any device; they are not end-to-end encrypted. Only the people in a chat can read it, and a moderator sees a message only if someone in that chat reports it.
- Co-op sessions over the internet: when you host a ThoughtJunkie session through Frienduit we keep the session's title, who you invited, who asked to come in and whether you let them, until the session ends. Frienduit also passes along the short technical messages that connect your computers (kept for a few minutes). The map itself, and any photos you share in the session's album, go directly between your computers and are never stored by Frienduit. Someone watching in a browser sees what a published map would show: no imported transactions, formulas or file locations.
- Files you send in Comms or a co-op session: the file itself never reaches Frienduit. It goes straight from your computer to the person who saves it, encrypted on the way. We keep the file's card in the chat (its name, size and type), who saved it or said no thanks, and how far each transfer got. An offer can be saved for 7 days, or until you take it back. The short messages that connect the two computers are kept for a few minutes. Like any direct connection between computers (co-op too), the other person's computer can see your internet (IP) address while it is connected.
- Voice calls and co-op voice: what you say is never sent to Frienduit or recorded. It goes straight from your computer to the other person's, encrypted. In a co-op session it goes through the host's ThoughtJunkie, which mixes everyone's voice. We keep that a call happened, who called whom, when, how long it lasted and how it ended (shown in your chat as "Call", "Missed call" or "Declined"), and the short messages that connect the two computers for a few minutes. Only your contacts can call you, and on Busy or Invisible, or with calls turned off, calls show as missed instead of ringing. Turn on Hide my address in Comms settings and your calls and internet co-op go through the relay, so the other computer never sees your internet address. Your microphone is only used during a call or while you're in voice, after you choose to join.
What we don't keep
- Card or bank details. Payments are handled by Stripe; we never see your card number.
- Passwords. Sign-in works with emailed one-time links.
- Advertising or analytics profiles.
Who else handles it
We use a small number of services to run Frienduit. Each only gets what it needs for its job:
- Render hosts our server and database.
- Cloudflare hosts this website and protects it from attacks. If two computers in a co-op session, a call or a file transfer can't connect directly, or someone turned on Hide my address, Cloudflare's relay (TURN) carries the connection between them, encrypted end to end.
- Stripe processes payments.
- Resend sends our emails (sign-in links and notifications).
- Anthropic generates AI results. When you use an AI feature, the text it needs (for example the node you're expanding) is sent to Anthropic to produce the answer.
- FormSubmit receives waitlist sign-ups from the home page.
- Google Fonts supplies the site's fonts, and YouTube plays music that someone has added to a profile or map. Your browser contacts them directly when those load.
Who can see what you publish
Public maps and profiles can be seen by anyone. Unlisted maps can be opened by anyone with the link. Friends, group and private maps can only be opened by the people that setting allows. Your email address is never shown to other people, and nobody can find you by it: people add you as a contact by your username or your Frienduit number, which are shown on your profile. Searching by part of a username only finds you if you turn on “Let people find me” in Comms settings (it's off unless you do); otherwise only someone who types your exact username or number can add you. If you change your username, your old one stays reserved for you for 90 days and links to it still reach you; after that anyone may take it. Your published maps show your current name; a minted thought keeps the name it was minted under. ThoughtJunkie's Comms panel uses the same account, contacts and messages as the website. Your contacts see whether you're online (unless you choose Invisible) and your status message; they see which of your maps you're working on only if you turn that on.
Your browser
When you sign in, your session key and a few preferences are saved in your browser's local storage so you stay signed in. Signing out removes them. We don't set tracking cookies.
Your choices
- Change or remove your profile details and published maps at any time.
- End sign-in sessions from your profile.
- Ask us for a copy of your data, to correct it, or to delete your account: email hello@frienduit.com from the address on your account. We'll answer within 30 days.
When an account is deleted, its profile, maps, comments, messages, contacts and other content are removed, along with any Sparks and Gems on it. We keep payment records for as long as tax and accounting law requires.
Children
Frienduit isn't meant for children under 13, and we don't knowingly collect their information. If you think a child has signed up, let us know and we'll remove the account.
Security
Connections are encrypted, sign-in keys are random and expire, and access to your maps is checked on our server on every request. No system is perfect, so if you find a problem please tell us at hello@frienduit.com.
Changes
If we change this page in a way that matters, we'll update the date above and, for big changes, tell you by email or on the site first.