Our privacy commitments

UltraGuest has been a free guestbook service since 2003, run independently as a labour of love rather than a business. That makes the promises below easy to keep, and we would rather say them out loud than hide them in fine print. They describe how the service works today; if anything here ever changes (for example a paid plan or advertising to keep the service running), these pages are updated first and nothing new is switched on for you without your say. These commitments apply to everyone, wherever you live.

No ads, no tracking, no data sales

Today there is no advertising on this site or in any guestbook, no tracking cookies, no advertising pixels and no fingerprinting, and we have never sold, rented or shared personal data with anyone for marketing. Under laws such as California's CCPA/CPRA this is a "no sale, no sharing" service. Should advertising or paid plans ever be introduced to keep the service running, it would be announced here first, and anything beyond strictly necessary cookies would remain off until you allow it.

We honor your browser's opt-out signal

If your browser sends the Global Privacy Control or Do Not Track signal, we treat it as your answer: statistics stay off and only the strictly necessary cookies are used, without you having to click anything. You will see a green check on our pages confirming it. We also declare our support at /.well-known/gpc.json.

Only what the service needs, only as long as needed

A guestbook owner gives us an e-mail address and a password, which we store hashed. A visitor who signs a guestbook gives a name, a message and, optionally, an e-mail address; we add the date and the posting address, which only the guestbook owner sees and which we keep to stop spam and abuse. People who merely read a guestbook are counted, never identified. Statistics on our own pages, if you allow them, use Cloudflare Web Analytics, which sets no cookies. Retention limits are in the Privacy Policy.

Your data is yours: take it or delete it, no questions asked

Guestbook owners can download everything we hold, at any time, from the Control Panel ("Download My Data": account, settings, every message, banned addresses and the notification log, as JSON and CSV), and can delete the whole account with one form. Deletion is immediate and complete. Nobody is locked in; the service is voluntary and leaving takes a minute. If you signed somebody else's guestbook, that owner can remove your entry, or you can send us a privacy request and we will act within 30 days.

Your legal rights, applied everywhere

We give everyone the rights of the strictest regimes we operate under: access, a copy of your data, correction, deletion, restriction and objection, without any downside for exercising them. That covers the GDPR in the EU/EEA, the UK GDPR, the Swiss FADP, California's CCPA/CPRA and the other US state privacy laws, Canada's PIPEDA, Australia's Privacy Act, New Zealand's Privacy Act 2020 and Brazil's LGPD. You may also complain to your local data-protection authority; we would rather hear from you first at support.

Security

All traffic is encrypted. Passwords are stored as bcrypt hashes. Password resets and e-mail verification use single-use links; we never send a password by e-mail. Forms are protected against automated abuse by Cloudflare Turnstile. Backups are encrypted and expire within 30 days.

Abuse and child safety

Automated rules check every post, and every stored post is re-scanned weekly. Illegal material and advertising for it are removed and, where the law requires, reported to the National Center for Missing & Exploited Children. Every guestbook page has a "Report abuse" link that reaches a person.

Last updated September 13, 2026. See also the Privacy Policy, the Cookie Policy and the Terms of Service.