SayHi help
How to use SayHi
Leave a hello
Enter your displayed name and a short message. Your website or email contact is optional and public. Clicking your name opens that website or an email draft; it never sends email automatically. Choose Send when you are ready. New posters' messages wait for the owner to review them, so your hello may not appear immediately.
If email sign-in is enabled, enter your private email to receive an 8-digit code. Enter that code in the SayHi popup or sign-in page where you requested it within ten minutes. Codes are single-use, allow five attempts, and new requests must wait at least one minute. Verifying your mailbox does not automatically publish your posts: the owner manages trusted accounts separately. Changed public contacts or suspicious messages can still need review.
Messages and smileys
Write plain text or emoji, or choose a smiley from the smiley picker. SayHi recognises the current set's smiley shortcodes. HTML and formatting tags are not supported. Use the optional Website or email field only for a contact you want everyone to see.
The newest messages appear first. Up and Down move through the messages already loaded; normal scrolling also works. Older loads earlier messages when available, and Latest returns to the newest ones.
Keep private details private
Your displayed name, published message and optional website or email contact are public. Only supply a public contact email you want visitors to see. Keep passwords and private details out of messages. The public contact is never filled from your private sign-in address. Email sign-in addresses are stored privately, along with account verification and trust information. SayHi uses necessary cookies for posting, sign-in and security.
The Privacy section below explains account records, spam-prevention fingerprints, maintenance, backups and hosting or mail logs. The contact page may not yet have an active contact method; check availability before relying on it.
Privacy
Your unsent displayed name, optional public contact and message draft are kept in this browser tab's session storage so they can survive sign-in and reloads. The private sign-in email is not stored with that draft. Closing the tab normally clears its session storage. Cancelling sign-in keeps the draft and does not send it.
Your displayed name, message and optional website or email contact become public when published. New posters require owner review. The site owner may separately trust a verified account to publish automatically; changed public contacts and suspicious content can still be held for review. Email verification proves access to a mailbox, not the identity behind a displayed name. Only enter an email in the public contact field if you want it visible to everyone. Keep passwords and private details out of messages.
When email sign-in is enabled, SayHi stores your sign-in email privately with account verification and trust settings. It never copies that address into the public contact field. Any email you deliberately supply as a public contact is visible to visitors and may be collected by them. It stores keyed hashes of short-lived verification codes, browser-bound challenge records, hashes of email-change or outstanding verification-link tokens, and hashes of poster-session tokens, and uses a necessary HttpOnly cookie for a session lasting up to seven days. Sign-in codes expire after ten minutes, are single-use, and work only in the browser that requested them. Five incorrect attempts lock that code challenge. Email-change or outstanding verification links also expire after ten minutes and require confirmation in the requesting browser. Sign out this device or all devices from the Account page. A completed email change resets trust and signs out existing sessions.
SayHi also uses a necessary session cookie to protect posting and owner sign-in. It stores a keyed network-address fingerprint to limit spam and block abuse. When the site operator runs its maintenance command, it removes message fingerprints older than seven days. Expired code challenges, verification links and sessions are cleaned up when sign-in requests are processed. Messages and accounts remain until removed; private recovery backups can retain earlier records. Hosting logs have separate retention settings.
When enabled, verification links are sent through the site’s configured mail service. The site owner can receive a limited alert that messages await review; alerts do not include your email or message text. Mail delivery and hosting logs follow the site operator’s service arrangements. There are no advertising trackers or third-party scripts. Use the private contact page to check contact availability; never post private contact details in SayHi.