Privacy & personal safety
Being findable shouldn't mean being followable
A handle makes you easy to verify. It should never make you easy to stalk.
Here's our model — including the honest status of each control.
What protects you today
Your handle publishes only what you put on it. No home address, no phone number, no
legal name is required — a handle with a single link, or nothing at all, is a valid
handle. Signed responses cut the other way too: nobody can impersonate you,
stand up a convincing fake profile under your name, and pass verification — the
signature math fails. And this site runs cookie-free, privacy-friendly analytics;
we don't build behavioral profiles of visitors or of you.
Safety controls we are building
For people dealing with a stalker, a harasser, or an abusive ex, "just delete your
profile" is not a safety plan — disappearing entirely often isn't an option. These
controls are designed for that reality:
- IN DEVELOPMENT
Per-person null-routing. Block a specific person or agent, and
their lookups of your handle return the same result as a handle that doesn't exist —
byte-for-byte identical to a real 404. No "you've been blocked" tell, no confirmation
that you're even on the platform. To them, you simply aren't here.
- IN DEVELOPMENT
Allowlist mode. Flip your handle to approved-parties-only:
nobody resolves your profile unless you've let them in. The strictest setting —
your handle keeps working for the people and agents you choose, and no one else.
- IN DEVELOPMENT
Blocklist mode. The default-open inverse: your handle stays
public, and the specific parties you name are null-routed as above.
- IN DEVELOPMENT
Lookup visibility. An audit trail of authenticated lookups
against your handle, so unusual attention is something you can see — and act on —
early.
# design target: these two responses are indistinguishable
$ curl -s -o /dev/null -w '%{http_code}\n' https://username.md/v1/users/no-such-handle/profile
404
$ curl -s -o /dev/null -w '%{http_code}\n' https://username.md/v1/users/handle-that-blocked-you/profile
404