# I am the Watcher. I am your guide through this vast new twtiverse.
# 
# Usage:
#     https://watcher.sour.is/api/plain/users              View list of users and latest twt date.
#     https://watcher.sour.is/api/plain/twt                View all twts.
#     https://watcher.sour.is/api/plain/mentions?uri=:uri  View all mentions for uri.
#     https://watcher.sour.is/api/plain/conv/:hash         View all twts for a conversation subject.
# 
# Options:
#     uri     Filter to show a specific users twts.
#     offset  Start index for quey.
#     limit   Count of items to return (going back in time).
# 
# twt range = 1 13
# self = https://watcher.sour.is/conv/yzslitq
@prologic Twtxt.net's privacy policy says you store emails, /register disagrees. Which is true?
@mckinley We don’t store email at all as of some time ago! Yhanks for pointing this out I’ll amend that doc ASAP πŸ€—
@mckinley We don’t store email at all as of some time ago! Yhanks for pointing this out I’ll amend that doc ASAP πŸ€—
@mckinley Fixed in 67af1d2 Thank you! πŸ™‡β€β™‚οΈ
@mckinley Fixed in 67af1d2 Thank you! πŸ™‡β€β™‚οΈ
@prologic Thanks for clarifying. Either way, it's a very reasonable privacy policy. I was just wondering about the details. If you don't store the email addresses, is it just a hash that's stored? Check against it for recovery, send an email if it passes?
@prologic Thanks for clarifying. Either way, it's a very reasonable privacy policy. I was just wondering about the details. If you don't store the email addresses, is it just a hash that's stored? Check against it for recovery, send an email if it passes?
@mckinley That's 100% correct. That's exactly what we do. We just store a SHA256 of the email you signed up with. if you forget your password, you give us your username and email, if we find a matching hash, we'll send you a recovery token. If you loose access to or forget your username/email, well too bad, we cannot literally help you! like at all :/
@mckinley That's 100% correct. That's exactly what we do. We just store a SHA256 of the email you signed up with. if you forget your password, you give us your username and email, if we find a matching hash, we'll send you a recovery token. If you loose access to or forget your username/email, well too bad, we cannot literally help you! like at all :/
@prologic I really like that. Email can't be known until it's needed.
@prologic I really like that. Email can't be known until it's needed.
@mckinley Yup! πŸ‘Œ
@mckinley Yup! πŸ‘Œ