Start with your relationship to the page
You may be an account holder, a visitor to someone else’s page, a person who sent a message, or someone whose information appears in published content. The available controls and the organization responsible for a request can differ in each case. Ons.Bio controls its own account and operational processing; a page owner may separately control how they use information received through their page.
The public privacy panel explains the parties described for a particular page. If you are not sure where to send a request, email support with the page URL and the issue. You do not need to create an account merely to raise a privacy concern. This guide supplements the Privacy policy rather than replacing its explanation of collection, recipients, retention, and legal rights.
Choose what your page displays
Use the dashboard to edit your display name, biography, images, enabled links, and available design options. Disable or remove a link if you no longer want it displayed. Saved edits can become public automatically and reach visitors within a short time; there is not a separate privacy review or publication approval for every change. Do not use public profile fields as a private draft notebook.
Your account email is not automatically a public profile field. If you type an email address, phone number, or other personal detail into your biography, a link, or an image, you are choosing to share it. Review the actual public page after a change, including how link destinations and browser metadata appear.
Changing a username is not an account erasure mechanism. The account identifier remains the same, and existing permanent page references may continue to identify the page. Removing public content also does not necessarily remove earlier screenshots, search results, message copies, analytics, unused uploads, or historical change records.
Control signup-country visibility
In dashboard Settings, find “About your page” and the “Show my country on my public page” control. Turn it off to show “Not shared” instead of the recorded signup country in the public page information. Your account join month and year remain public. Country sharing is initially enabled where a trusted country was recorded; a missing country may be shown as unavailable.
This setting hides the country from that public disclosure. It does not delete the stored signup-country value, hide all evidence of your location in content you publish, or change visitor analytics. The recorded country comes from network-based information at signup, not a GPS permission. Contact support if you need to question or correct the retained value.
Open or close your inbox
Your inbox starts off. In the Inbox section, the “Let people leave a message” setting controls whether your public page accepts new messages. Turning it off stops new submissions but preserves existing messages. Read and unread controls organize the inbox; they do not erase its contents.
Visitors can omit a sender name. This removes the name from the message presented to the recipient, but the service still stores the message and a security-related sender hash derived from request information. An entered name is not verified. Do not interpret “anonymous” as a guarantee that the service processes no technical information or that a message cannot be recognized from its contents.
The current inbox has no self-service deletion button or message recall. If you sent a message by mistake or want a message removed, contact support with the recipient page, approximate time, and enough context to locate it. Do not resend the entire message if it contains sensitive information. We may need to establish your connection to it and consider the recipient’s rights. We cannot recall copies independently made by the recipient.
Manage uploaded files and fonts
Replacing a profile image or removing a link changes what the page uses. It does not necessarily delete the original stored file. Standard image uploads are re-encoded to remove embedded metadata, but visible personal details remain visible. Only upload material you are comfortable using for its intended purpose and have permission to share.
You can permanently delete unused fonts from your font library. If the font is currently selected, first choose another font or Default typography, allow that change to save, and then delete the unused font. Font-license declarations and related processing are described in the Privacy policy and the agreement shown during upload.
Other image-removal or stored-upload deletion requests currently go through support. Publicly displayed assets cannot be made uncopyable, and a deletion request cannot guarantee removal from an independent recipient’s device or a third-party cache.
Understand analytics choices and limits
Visiting a public page or following its enabled links can generate activity events. Standard page analytics contain timestamps and approximate country or region; Private Client pages may also have approximate city information. Page-event records do not include visitor names, emails, raw IP addresses, or a visitor account ID, but this does not mean that every related technical system is anonymous.
There is currently no in-product visitor toggle that switches off all first-party analytics, and no implemented Global Privacy Control or Do Not Track override for those events. Signing out or clearing cookies does not delete previous activity or necessarily stop new page-event requests. Browser extensions and privacy settings may block some processing, but their effectiveness depends on the tool and configuration.
If you wish to object to processing or ask about removal of activity, contact support. Tell us which page and approximate time are relevant. Because the event table lacks a direct visitor identity, we may not be able to confidently identify your events or provide a personal browsing history. We should not collect excessive new identifying information simply to manufacture that connection. Rights and consent requirements under applicable law still apply even where a self-service switch is unavailable.
Request access, correction, deletion, or a copy
Depending on the applicable law, you may have rights to access information, correct inaccuracies, ask for deletion, receive certain information in a portable form, restrict processing, object to certain uses, or withdraw consent where processing relies on consent. These rights are not identical everywhere and can have exceptions. A request should be assessed on its facts, not rejected merely because the product lacks a matching button.
Email support@ons.bio and describe the right or outcome you want to exercise. An authorized representative can make a request where permitted, subject to appropriate confirmation of authority. If you are asking about someone else’s public page or inbox, identify that relationship so the request can be directed appropriately.
- Identify the account email or relevant public page URL, and whether you are the owner, visitor, sender, or another affected person.
- Explain what information is involved and whether you want access, correction, a copy, removal, restriction, or another action.
- Provide a relevant date range or approximate message time if it will help locate the record.
- Give a safe contact email. Do not include passwords, session cookies, payment-card details, or identity documents in the initial request.
What happens after a request
We may need additional context and proportionate verification before disclosing or changing information. Verification helps prevent another person from obtaining or deleting your data. The evidence needed should reflect the sensitivity and risk of the request. If additional documents are needed, ask how to provide them safely rather than sending unnecessary material unprompted.
The response and any extension or fee must follow applicable law. This guide does not promise a universal deadline that overrides local requirements. We may need to explain why some information cannot be located, why an exception applies, or why another controller is responsible. A deletion request may need to account for security, legal obligations, disputes, backups, or the rights of another person.
The current service does not promise immediate deletion from every system, an automatic downloadable archive, or a one-click removal from external sites. If you are dissatisfied with the handling of a request, ask support for a review and, where available, contact the relevant data-protection authority. This support process does not remove a right to make a regulatory complaint.
Close an account or address urgent exposure
There is no complete self-service account-deletion workflow in the current dashboard. To ask for account closure and associated data handling, email support from the account email where possible and specify whether you also want your public page removed and stored information considered for deletion. These are related but distinct actions; do not assume that signing out, disabling a link, or changing a username performs all of them.
If you accidentally publish sensitive material and still have access, remove it from the profile or disable the affected link promptly, then contact support with the URL and a description of the remaining concern. Do not reproduce the sensitive information unnecessarily in the request. For threatening or abusive content on someone else’s page, use the reporting route or contact support. Immediate danger should be directed to emergency services.
The available product controls may change. This guide describes the current implementation and will need updating when new deletion, export, consent, or other privacy tools are introduced. Your legal rights are not limited to the controls listed here.