Your privacy matters.

Who runs this project?

Mostly Eli is an independently operated creative project managed by its creator, Andrew. Eli and Mason are fictional, AI-generated characters, not real children. Comments and replies associated with @mostly.eli are managed by the project's adult owner and its authorized tools.

Instagram comments and Eli's Mailbox

When someone publicly comments on posts published by @mostly.eli, the project may obtain data through Meta's Instagram API. This can include the Instagram username, public comment text, comment and media identifiers, timestamps, and information about whether the comment has been classified, reviewed, or answered.

We use these details to display comments in a private moderation dashboard, detect spam or unsafe interactions, prepare possible public replies, avoid duplicate replies, and keep basic records of moderation decisions. The system can use automated rules to categorize comments, and the owner can review or correct those categorizations. Public responses may be drafted with AI assistance and, when enabled, sent through the Instagram API under the project's account.

We do not use this comment tool to read Instagram private messages, follow people, or contact commenters privately. A reply published on Instagram is public under the original post. Meta separately controls how Instagram itself uses information; see Meta's privacy policy.

Website guestbook, comments and reactions

If you submit a guestbook note or a comment through the website, we process the name and message you choose to provide, the submission time, moderation status, and any relevant post or interaction identifier. Submissions may appear publicly after automatic or owner moderation; don't include private or sensitive information in public messages.

Reactions and anti-abuse counters may be stored to limit repeated activity. To help prevent spam, our application can derive salted one-way hashes from network addresses for daily rate limiting rather than saving raw IP addresses in the site's reaction or guestbook database. Cloudflare may independently process technical request information to provide security and hosting.

House Letter emails

If and when newsletter signup is enabled, choosing to subscribe will require an email address and confirmation. We would store the address and subscription, confirmation, and unsubscribe status to send and manage the House Letter. The list is not public and is not sold for advertising. Email delivery may use a provider such as Resend, which would process addresses for delivery. Subscribers can unsubscribe through the links in the emails. An opt-out record may remain to prevent unwanted resubscription or mailing. If signup isn't enabled, the site does not accept new House Letter subscriptions.

Technical information, security and local storage

Cloudflare hosts and protects the website and may process IP addresses, browser and request details, and security signals for hosting, analytics and abuse prevention. Cloudflare Turnstile may be used on submission forms. Some pages use basic browser storage, such as a last-visit time, to show changes since your previous visit. You can clear this information using your browser's site-data controls. If you sign in to a private part of the website using Cloudflare Access, Cloudflare may process your authentication information.

Sharing and security

We share information only as needed with the platforms and service providers that operate these features (including Meta/Instagram, Cloudflare, and an email-delivery provider if newsletters are enabled), or when required for legal or safety reasons. We do not sell commenter, guestbook, or subscriber information. The comment moderation dashboard and stored Instagram access credentials are restricted to the owner or authorized operators; no security system can guarantee absolute protection.

How long we keep information

Moderation records, public submissions, and operational logs are kept while needed to run, protect, and review these features; there is not currently one fixed retention period for every category. We review removal requests and delete or anonymize applicable stored information when appropriate, subject to necessary safety, security, or legal records. Limited copies can persist temporarily in backups. Removing a record from our system does not delete the original comment from Instagram, which the commenter can control through Instagram.

Request access, correction or deletion

To ask what information the project stores about your public interaction, or to request correction or deletion, send a private message to @mostly.eli on Instagram with the words “Privacy request”. Identify the Instagram username or comment/guestbook entry involved so the owner can locate the correct record. Do not include passwords or sensitive documents. We may need to confirm that the request concerns your own content before making changes. These requests are handled by the project's human owner, not by Eli as a fictional character.

If you want a public Instagram comment itself removed, Instagram provides its own controls; removing a copy from our moderation database does not necessarily remove the public Instagram comment.

Changes to this policy

We may update this page as features change, especially if our moderation or newsletter tools change. Material changes will be reflected here with a new effective date. The policy describes our actual practices and does not expand our rights under Meta's platform terms or applicable law.