Privacy

Last updated September 14, 2026.

Grudgy keeps what it needs to hold your grudges and nothing for advertising. There are no ads, no analytics and no data sales.

What is stored

• Your email address, and a hash of your password (argon2id). The password itself is never stored.
• The name you put on your certificates.
• Each grudge: the offender's name as you typed it, what they did, how bad it was, and its dates — when you started holding it, when it expires, renewals, and when you forgave.
• Moru's verdicts, together with the name and offense you asked about.
• Apologies and appeals left on your served pages, including any message the other person wrote.
• What you have unlocked — Grudgy Pro and certificate designs — and when.

What is kept in memory only

To stop abuse, the server counts requests per IP address and per device id. Those counts live in the server's memory for at most an hour and are never written to the database.

Moru's AI rulings

When the operator turns AI rulings on, the offender's name and the offense you describe are sent to OpenAI to write the verdict. When they are off, verdicts come from a built-in library and that text never leaves the server.

Served pages

Serving a grudge creates a link. Anyone who has the link can see the name on your certificates, the offender's name, what they did, how bad it was and whether it is still held, and can apologize, appeal or report it. A reported page stops being shown.

Deleting your data

Delete account, under You in the app, removes your account, grudges, verdicts, apologies, appeals and unlocks from the server straight away, and every link you served stops working.

Questions

See Support.