Privacy Policy

Last updated: February 2026

What we collect

When you create an account, we store:

  • Your email address (used only for login and password reset)
  • Your username and display name
  • A hashed version of your password (we never store it in plain text)
  • Character profiles and text you write
  • Images you upload

We also log IP addresses for rate limiting and abuse prevention. Logs are not retained beyond 30 days.

What we don't collect

  • No tracking pixels or third-party analytics
  • No advertising or behavioural profiling
  • We do not sell or share your data with third parties

Images

All images you upload have EXIF metadata automatically stripped before storage. This removes location data, device identifiers, and other embedded metadata.

Cookies

We use a single session cookie (HTTP-only, secure) to keep you logged in. No third-party cookies are set.

Data retention

Your data is retained for as long as your account is active. You can request deletion of your account and all associated data by emailing [email protected]. We will process deletion requests within 30 days.

Public profiles

Characters set to Public or Unlisted visibility are accessible to anyone with the link. Public characters may appear in browse listings and search engines. If you want to remove a character from public view, set it to Private or delete it from your dashboard.

Contact

Questions about this policy? [email protected]