Privacy

Privacy settings control how the rest of PostRoll surfaces you to other people. Every preference here saves automatically; there’s no separate Save button.

Open the page from your avatar → Settings → Privacy.

Profile visibility

Who can view your public profile page:

Public — anyone with the link, including signed-out visitors.
Unlisted — link only. The page works for anyone who has the URL, but PostRoll doesn’t surface you in search or player-finder.
Followers only — visible to accounts you’ve accepted as followers.
Private — only you can view the page.

Follow requests

Setting your profile to Private turns following into something you approve. Requests queue up under Settings → Connections, which — despite the name — is nothing to do with linked accounts: it’s a list of the people who’ve asked to follow you, each with Accept and Decline. Accepting turns the request into a real follow; declining removes it.

Every other visibility — Public, Unlisted, and Followers only — accepts follows instantly, with nothing to approve, so the page stays empty.

Direct messages

Who can start a new direct conversation with you. Existing conversations stay open regardless of this setting; this only gates new DMs.

Everyone — any signed-in PostRoll user can DM you.
People you follow back — only mutual follows.
Nobody — DMs are closed.

@mentions

Who can @you in posts and comments. Mentions outside this policy are dropped silently — you don’t get a notification and the mention text falls back to a plain string.

Player & GM finder discoverability

Whether your profile is surfaced in the player-finder, GM-finder, and related in-app discovery rails. Turning this off doesn’t hide your profile from people who already know your username — it removes you from the suggestion / search surfaces.

Search engine indexing

When off, your public profile page is served with x-robots-tag: noindex so search engines don’t list it. Turn it off if you want a profile that’s reachable by link but doesn’t show up when someone Googles your name.

What enforcement looks like

Profile visibility on /u/<username> — followers_only viewers who aren’t followed back, and private viewers who aren’t the owner, see a small stub page with avatar + display name + username and (for followers-only) a Follow CTA. The full profile and outpost list never render.
DMs — when someone tries to start a new DM with you, PostRoll first asks “is this allowed?” via a database function. nobody refuses every new DM; followers only accepts mutuals; everyone is unchanged. Existing conversations are unaffected. A database trigger enforces the same rule for any direct API caller, not just the in-app composer.
Mentions — when an @you is detected in a post, comment, or chat message, the mention notification is silently dropped if the author doesn’t satisfy your mention_policy. The mention text still renders in the body; you just won’t be pinged.
Discoverability — discoverable=false removes you from the /games marketplace browse and from the sitemap, but your storefront URL still resolves for anyone who has the link.
Indexing — search_engine_indexable=false (or any visibility other than public) emits <meta name="robots" content="noindex"> on your profile and storefront pages. Pages still load for direct visitors; only crawlers are told to skip them.