Notifications · Privacy · Security
Updates for Harmony Control
This is where we post upcoming changes, privacy work, and anything you should know about keeping a private D/s tracker.
Today we are talking about the identity protections we shipped this month — written for members, not for engineers.
13 September 2026
Protecting the personal details in your dynamic
Harmony Control holds intimate agreements: limits, tasks, journals, health scores.
Those notes should not sit next to an easy-to-guess account number or a plain inbox address.
This month we changed how identity is stored so your dynamic is harder to connect to the rest of your life.
- Links are no longer guessable. Account and relationship addresses use long random identifiers. Someone cannot walk the numbers 1, 2, 3 to find another person’s overview.
- Email is optional, and kept apart. If you give an email, it is stored separately from your relationship notes and protected at rest. Login still works. Two-factor authentication still works the same way.
- Account mail is not a public inbox list. Records of mail we send refer to your account, not a stored copy of your real inbox sitting beside your dynamic.
- Pages load from us. Typefaces, icons, and charts come from our own servers — not from large public font or script networks.
- Visits are counted to improve the product, not to advertise you. We still need to see which pages help people. Advertising use of those visits is switched off. We do not sell your journals or contracts.
- Paid plans do not hand your inbox to billing. If you subscribe, the payment company receives a stand-in contact we create for that account — not the email you use in daily life.
The legal detail stays in the Privacy Policy.
This page is the plain-language note.
How to use an anonymous account
You can join with a username and password only. No email. That is the unlinkable option:
we have no inbox to reset the password, so you must keep the recovery codes.
Email signup still sits beside this if you want a normal reset link.
- Open Register.
- Choose a username and a password you will remember. Leave the email field blank.
- Accept the Terms and Privacy Policy, then create the account.
- You will see eight one-time recovery codes. Save them offline — a password manager, a printed page, or another place that is not this device’s notes app alone.
- Each code works once. If you lose the password later, go to Recover account, enter the username and one unused code, and set a new password.
If you do give an email, keep using Forgot password as usual.
Two-factor, if you turn it on, is unchanged.
Closing an account
When you close an account, we deactivate it and take the public username out of use.
That is a quiet off switch, not a public announcement.
We have not bulk-deleted older closed accounts in one sweep.
If you need a deletion request beyond that, use the contact on the Privacy Policy.
Coming next
We will post product notes here when something members should know is ready —
privacy, features, or how a flow changed.
Nothing else is scheduled to announce today besides this identity work.
Check this page, or the Updates link in the top bar, when you want the latest note.