Isle shows what you choose to show, keeps your history on your computer, and you can delete everything in one tap.
Isle is an independent project run by its developer during the beta, who decides how the data below is used (the “controller”). For any privacy request, use Report a problem in the Isle menu (the tray icon) and say what you need. We answer within 30 days.
joinisle.xyz sets no cookies and uses no analytics, ads or tracking pixels. Fonts and images are served from our own site. Our hosting provider (Vercel) keeps short technical logs, such as IP address and time of the request, to run and protect the site. Images you try in the Customize studio stay in your browser and are never uploaded. Details in Cookies.
Claiming a handle creates your island: we store the handle, your password (as a one-way hash managed by our database provider, never readable by us), your email, the platform you chose and the date. We use the email only to tell you about your island: when Isle is ready for your computer, early access and important changes. It is never shown to anyone, never sold, and you can ask us to delete it at any time. If you connect Discord after claiming, we store your Discord user id and name to add you to the Isle server with the Early Islander role; one Discord account can belong to one handle only. To stop abuse we keep a scrambled (hashed) version of your network address: one day for rate limits, and 30 days with the reservation, so one person cannot take hundreds of handles.
To show your island, Isle looks at:
It never reads page content, keystrokes, your screen or your files. On a Mac you are asked once for permission to read the browser tab.
Account: your handle, password and recovery key (both only as one-way hashes), a random device id, display name, avatar, banner, the look of your island, linked usernames, pins and badges. The app itself never needs an email to work; the email you give when claiming a handle on the site is used only for launch and early access messages.
Presence: what you are doing right now (song and artist, game and its launcher id, work app, and what you watch only if you switch that on). Who can see it follows your setting: everyone, friends or nobody. Ghost mode hides you completely.
Taste: a short list of your most played artists, games, shows and channels, worked out on your device and shared only as that list, never as a history. Turn it off in Settings, Account, Learn my taste.
Social: friends, likes, pings, things people leave you, direct chats, blocks and reports.
On joinisle.xyz/@handle anyone with the link can see your name, avatar, banner, page look, the badges you chose to show, your about text, story, links, blocks and polls, your like count and, if your presence is set to everyone, what you are doing right now. Links can be set to show only while you are online, playing or listening; that is decided on our server and visitors cannot see the rule.
Background picture or GIF: if you upload one, it is stored in our storage (Supabase, EU) at a public address so visitors can see it, up to 5 MB. When you replace or remove it, the old file is deleted.
Pinned song: when you pin a song, we save its title, artist, cover address and a link to the 30 second preview from Apple Music. Visitors' browsers load the cover and the preview directly from Apple's servers, so Apple receives their network address as with any image or audio on the web. Nothing is loaded until the page is opened, and the preview plays only when the visitor taps it.
Hide your page with Ghost mode, or delete your account to remove it.
If you open someone's page we count the visit and the links you tap as plain numbers for the owner (for example “12 views today”), kept for 60 days. We store no cookie and no account for that. To allow one like, one vote and one report per visitor, our server turns your network address into a one-way fingerprint mixed with a secret key, so it cannot be turned back into the address. Like and report fingerprints are deleted after two days; a poll fingerprint is kept with the poll so you cannot vote twice.
Voice goes directly between the two devices and is not recorded or stored by us. Because the connection is direct, the other device can technically see your network address, like in any call app. Our server only passes the connection details. To find the best route, the app asks Google's public STUN servers for your network address; they see that address and nothing of the call. Listening together shares the song and the playback position with the friend you invite.
An automatic filter stops hate, slurs and threats in messages and masks vulgar words. Links on public pages are checked against a list of shorteners, IP loggers and porn sites. Reports include the context you were in, and an admin reviews them. To protect the service we also keep simple counters of new accounts per hour.
Nobody for advertising, and we do not sell data. Providers that process data for us, only on our instructions:
Some providers can process data outside the EU; when they do, they use the safeguards the GDPR requires, such as standard contractual clauses. Links you open lead to other sites with their own rules.
Running your account and the features you use is needed to provide the service you asked for (GDPR article 6.1.b). Moderation, abuse prevention and the short technical logs are our legitimate interest in keeping Isle safe (6.1.f). Emails about your island and the launch are part of the waitlist you joined (6.1.b); you can ask us to stop them or delete your email at any time.
You can see, correct, export and delete your data, and object to or limit how we use it. In the app, Settings, Account, Delete my account removes your profile, page, presence, friends, messages, likes, uploads and everything else that belongs to you, and resets the app on your computer. For a copy of your data or anything else, use Report a problem.
You can also complain to your data protection authority; in Italy that is the Garante per la protezione dei dati personali.
Isle is for people aged 13 and over (16 in the European Union and the United Kingdom). If you believe an account belongs to a younger child, report it and we will close it and delete its data.
When this policy changes in a way that matters, we update the date at the top and tell you in the app. See also the Terms.
Isle is an independent project in beta. Questions about these pages: use Report a problem in the Isle menu, or Report content.