Pillowfort
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared only with the providers who run the service.
- Staff may review your content; the policy does not describe an opt-out.
A blogging site that collects usage data and cookies, can read private posts, and can close your account with no notice.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, your posts, how you use the site, IP and device details, and cookies.
Read the exact line
Privacy policy
“Login and usage data, which may include your IP address, browser type, operating system, user-agent string, any search engine or referral link information, pages visited, and device information.”
Training
They use it to run the site, personalize it, fix problems, and enforce the rules.
Read the exact line
Privacy policy
“Pillowfort may use information you provide and that we collect for: Research and development related to the services, such as communicating with you about surveys or questionnaires related to improving the Services.”
Sharing
Other users see public posts; Google Analytics and Microsoft PhotoDNA also get some data.
Read the exact line
Privacy policy
“Pillowfort does not now, nor will it in the future, sell our user information to third-parties.”
Kept
You can delete your account, but they may keep your username and signup IP.
Read the exact line
Privacy policy
“Pillowfort may also retain some information that you submitted to the Services for or if it is required by law, such as your username and IP used when you created your Account.”
Controls
You can edit profile info, delete your account, refuse extra cookies, and opt out of promo emails.
Read the exact line
Privacy policy
“You also may delete your Account at any time.”
Fine print
They can close you with no notice; Texas courts; as-is service; you cover their legal costs.
Read the exact line
Terms of service
“You agree that Pillowfort may, without any prior written notice, immediately suspend, terminate, discontinue and/or limit your account, any email associated with your account, and access to any of our Services.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Delete your account in settings
Account profile / Settings page, or email info@pillowfort.social
Opt out of promotional emails
Account settings, the link in promo emails, or info@pillowfort.social
Refuse non-essential cookies
Cookie consent prompt or your browser cookie settings
Ask for access or deletion (EEA/California)
Email info@pillowfort.social
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can shut your account right away and do not have to warn you first.
Read the exact line
Terms of service
“You agree that Pillowfort may, without any prior written notice, immediately suspend, terminate, discontinue and/or limit your account, any email associated with your account, and access to any of our Services.”
For example, you could log in one day and find your blog gone with no email explaining why.
If someone sues them because of something you posted, you may have to pay their legal bills.
Read the exact line
Terms of service
“All users and/or members herein agree to insure and hold Pillowfort, our subsidiaries, affiliates, agents, employees, officers, partners and/or licensors blameless or not for any claim or demand, which may include, but is not limited to, reasonable attorney fees”
For example, if a photo you shared leads to a lawsuit, they can ask you to cover their lawyer fees.
Staff can read posts even in private or closed communities.
Read the exact line
Terms of service
“You acknowledge and agree that Pillowfort may review your Content in any part of the Services you use and access, including closed community and private areas.”
For example, a private journal post could still be read by Pillowfort while checking the rules.
A Google product gets data about how people use the site.
Read the exact line
Privacy policy
“Pillowfort sends user activity data to Google for the purpose of analytics, which allows us to improve the Services.”
For example, which pages you visit can be sent to Google Analytics in form.
Deleting your account does not wipe everything; some signup data can stay.
Read the exact line
Privacy policy
“Pillowfort may also retain some information that you submitted to the Services for or if it is required by law, such as your username and IP used when you created your Account.”
For example, after you delete the account, they might still have the IP you used when you signed up.
They do not promise the site will work or that your posts will be saved.
Read the exact line
Terms of service
“You understand and agree that the Services are provided "AS IS,” and that your access and use of the Services are at your own risk.”
For example, if the site loses your blog posts, they say they are not responsible.
Keeping using the site after a policy change counts as agreeing, even if you missed the email.
Read the exact line
Privacy policy
“If you continue to use the Services after any change to the Privacy Policy, you agree to be bound by the changed policy.”
For example, if they add a new use of data and you keep posting, they treat that as acceptance.
They say they will not sell your personal information.
Read the exact line
Privacy policy
“Pillowfort does not now, nor will it in the future, sell our user information to third-parties.”
For example, they say they will not sell a list of emails to an advertiser.
Your posts stay yours; they only get a license to show them on the site while you are a member.
Read the exact line
Terms of service
“Pillowfort shall not lay claim to ownership of any content submitted by any member or user.”
For example, they say they do not own the stories you write on your blog.
Kids under 13 are not allowed, but they do not describe a real ID check.
Read the exact line
Privacy policy
“No person under the age of 13 is allowed to create a user Account or otherwise use the Services.”
For example, a 12-year-old could still type a fake birthday and sign up.
Words to know
Legal words from the lines above, in plain English.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- legitimate interest
- A legal reason that lets a company use your data without asking, when it decides its own need outweighs your privacy. For example, an app may analyse how you use it to improve the product, without ever asking you.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
- de-identified
- Data with your name and obvious identifiers removed, though it can sometimes still be traced back to you. For example, your chats with names stripped out may still be kept and studied after you delete your account.
How we got here · grade D · score 39/100 · 15 of 15 policy answers backed by a verified quote · 4 not stated
What does the app collect beyond what it needs to work?
They collect account details, your posts, how you use the site, IP address, browser and device info, payment info, and cookies.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
They say they may review your content anywhere on the site, including private areas, with no opt-out.
Are you profiled or tracked for advertising?
They use targeting cookies, third-party cookies, and send anonymized activity to Google Analytics.
Do they sell or share your data, and can you opt out?
They say they do not sell user information. They share with services like Google Analytics and Microsoft PhotoDNA, and for legal reasons.
What rights do they take over what you type and what the AI makes?
They say they do not own your content. You give a license to show it on the site, and that license ends if you leave.
How long do they keep your data after you delete it, and can you delete it in the app?
You can delete your account in the profile, but they may keep some data such as username and signup IP, with no time limit given.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they try to keep physical, procedural, and technical security. The bug bounty is inactive.
Is there a real age gate, and are teens protected?
No one under 13 may use the site. They do not describe checking age beyond that rule.
Will they tell you when the rules change, and is the policy specific?
The privacy policy is dated. They email account holders about material privacy changes, but keeping using the site still binds you.
Can they close your account without warning, and can you get your data out first?
They may suspend or end your account immediately with no prior written notice.
If something goes wrong, who pays?
The site is as-is with broad damage limits, and you must cover their costs if a third party sues over your content.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 3,350 words at a college level (Flesch reading ease 40.1); the terms are 3,690 words at a college level.
