Sharing.

Three audiences, on /sharing.

/sharing is where you decide who gets in. Your profile starts private.

Public — anyone with the link sees a summary: how many events you have logged, your busiest event types, and an activity heatmap. New public profiles are held to the top five types and the last 30 days, and /sharing spells out what that publishes before you turn it on. Widen it if you want to; it will not widen on its own. The page gives you the URL once it's on.

Specific handles — stay private, but let named people through one at a time.

Orgs — let an organisation's members through as a group.

The same page lists people sharing with you, which is the only way to find out someone has — nothing notifies you.

People you let in see the log, not just the shape.

Someone you have shared with opens your profile and gets your actual events, in the same words you read them in on your own activity log. Until recently a share showed only counts and a heatmap — enough to tell that you had been playing, never what happened.

New shares cover the last 30 days. That is a starting point rather than a ceiling: widen the window, or narrow a share down to particular event types, under More options when you grant it.

Events you have hidden stay hidden, whatever a share says. That one outranks everything else here — it is the control that decides what exists to be shared in the first place.

Category visibility is a separate page.

Widget visibility controls which categories a viewer gets, whoever they are: combat, commerce, movement, records, and your recent-activity feed.

The two levels multiply rather than override. A public profile with commerce switched off means anyone can find you and nobody sees what you spend. A private profile with everything switched on still shows nothing to anyone you haven't let in.

Two levels because “let my org see me” and “let anyone see my spending” are different decisions. Collapsing them into one switch would force you to over-share in order to share at all.

Every grant is reversible.

Going private again, dropping a handle, or leaving an org share all take effect immediately — there's no window where an old link keeps working.

Machines are separate from people: the Emitter page lists the desktop apps paired to your account, and revoking one there stops that machine sending. That is a different action from un-sharing your profile, and you may want both.

What leaves your machine in the first place.

Sharing decides who sees data we already hold. What gets collected at all is a different question, and /trust answers it — including the part people expect to be untrue.