Privacy-First Comments

25 Feb 2026 ยท 3 min read

Comments are user-generated content and that means personally identifiable information. The platform is designed around minimising what is collected and giving site owners control over retention.

Anonymous Identities

Visitors can comment without creating an account. The system assigns a short-lived anonymous identity that is scoped to the current browser session. No cookies are set; identity is stored in sessionStorage.

GDPR Data Export & Deletion

Site owners can export all comments by a given identity via the admin API. Deletion requests remove the comment body and replace the author name with "deleted" while preserving thread structure.

Data Residency

All comment data lives in Cloudflare's network. By choosing a D1 database location hint you can pin storage to a specific region โ€” EU, US, or APAC โ€” to satisfy local regulations.

Privacy is not a feature toggle. It's a design constraint that shapes every layer of the stack.

Comments