Privacy policy

This demo stores a small account record, hashed session identifiers, a ledger and the content you choose to save.

What we store

Account data: email, username, display name, password hash, theme and preference JSON. Passwords use scrypt; raw passwords are never stored.

Security data: hashed session tokens, hashed IP/email rate-limit keys, timestamps and a short user-agent string. Raw session tokens are not stored.

Product data: ledger entries, grants, unlocks, lists, follows and subscription records.

Cookies

A session cookie keeps you signed in, a device cookie connects anonymous unlocks to a later signup, and unlock cookies remember pack access in this browser.

Theme and NSFW reveal preferences may be mirrored in localStorage. None of these values grant access without server-side rows.

Analytics

Google Analytics measures visits to public pages automatically and may store analytics cookies in your browser. Google receives the measurement data. Admin, account, login and link-token pages are excluded.

Advertising storage, ad user data and ad personalization are disabled in the Google tag configuration.

Retention and deletion

Sessions expire after 30 days of inactivity. Ledger and unlock rows live with the account until deletion; anonymous device rows are retained for the device ledger.

Deleting an account removes its users, sessions, ledger, unlocks, lists, follows, settings and subscriptions. Audit rows retain no raw secrets.

Contact

This demo has no production support channel. Do not enter real personal or payment data.