Privacy Policy

Last updated: February 2026

What we collect

When you create an account, we store:

  • Your email address (used only for login and password reset)
  • Your username and display name
  • A hashed version of your password (we never store it in plain text)
  • Character profiles and text you write
  • Images you upload

We also log IP addresses for rate limiting and abuse prevention. Logs are not retained beyond 30 days.

What we don't collect

  • No advertising or behavioural profiling
  • No tracking pixels, and no analytics service that profiles you across sites
  • We do not sell or share your data with third parties

Analytics

We count page views and a small number of actions (such as copying a profile link) using Umami, which we run ourselves on our own server rather than handing the data to an analytics company. It sets no cookies, does not follow you across other sites, and records no information that identifies you personally.

Images

All images you upload have EXIF metadata automatically stripped before storage. This removes location data, device identifiers, and other embedded metadata.

Cookies

We use a single session cookie (HTTP-only, secure) to keep you logged in. No third-party cookies are set.

Data retention

Your data is retained for as long as your account is active. You can request deletion of your account and all associated data by emailing [email protected]. We will process deletion requests within 30 days.

Public profiles

Characters set to Public or Unlisted visibility are accessible to anyone with the link. Public characters may appear in browse listings and search engines. If you want to remove a character from public view, set it to Private or delete it from your dashboard.

Contact

Questions about this policy? [email protected]