Available now
Audience boundaries
Exclude viewers by distance, city, region, or country before a private request is published.
A live browser pilot
Honest feedback without exposing yourself to everyone you know.
Create a real private request, control which locations may view it, and receive constructive responses from signed-in adults. This pilot is the product—not a simulation or public feed.
Candor is free — no charge, no ads, no data selling; supported by optional contributions.
This limited browser pilot cannot provide native screenshot or capture protection. Those safeguards are planned, not live here.
Protected portrait
A request stays within the boundaries you set.
Visibility controlled by requester
Viewer identity logged
Native protection planned
The browser pilot runs the real private request and review flow. It cannot provide device-level capture protection.
The premise
Private by design. Direct without becoming cruel.
Candor is for requester-initiated feedback on your own appearance. It is not dating, ranking, a public profile, or a place for private messages.
- 01
Set the boundary
A request begins with the person who owns the photo and the visibility they choose.
- 02
Invite accountable viewing
The server checks every viewer against those controls and records each allowed view.
- 03
Receive constructive feedback
Structured responses and moderation keep the focus on usable feedback.
What makes it different
What works in the pilot—and what still needs a native device.
Every capability is labelled. “Available now” means the software exists in the limited browser pilot; provider-gated verification is called out in the copy. Native-only controls are plans, not promises about this website.
Available now
10 capabilitiesAvailable now
Watermarked, accountable views
Each allowed view is tied to the signed-in viewer, logged, and delivered with a per-view trace code.
Available now
Identifiable viewing
Every viewer is signed in and the server can identify the account behind each logged view; there is no anonymous access.
Available now
Structured and written feedback
Optional structured prompts sit beside required free-text feedback, with safety review before publication.
Available now
No DMs. No public feed.
Every request starts with its owner, and there is no private-messaging channel or browseable face feed.
Available now
Report, block, appeal
People can report or block from the protected flow; human moderation and an appeal route back every decision.
Available now
Account and data deletion
People can close their account and request deletion of the data attached to it.
Available now
EU-hosted, adults-only
The pilot uses EU-hosted data services and requires an explicit 18+ attestation.
Available now
Verified access
Email works now. SMS, Google, and Apple flows are built in and activate only when their providers are configured.
Available now
No ads or data selling
Candor has no advertising product and does not sell personal data.
Planned — native app
3 capabilitiesPlanned — native app
Device-level capture deterrence
Android screenshot blocking, iOS capture detection, and app-switcher hiding require the native app.
Planned — native app
Camera-obstruction checks
A disclosed camera check while viewing is planned as an honest deterrent, not an absolute guarantee.
Planned — native app
Contact and Instagram exclusion
On-device contact matching and exact Instagram-handle exclusion are planned for native setup.
The campaign
Funding the safeguards that a browser cannot promise.
A future campaign will fund native capture deterrence, accountable viewing, moderation operations, accessibility, and legal/privacy review. There is no live campaign total or backer count here.
Hear when it launchesWhat funding pays for
- Native protected-view research and testing
- Human moderation and safety operations
- EU-focused privacy, security, and legal review
- Accessible iOS and Android development