Privacy Policy

• Account: your email address, a hashed password (we never store the password itself), and your username.
• Discord login: if you use it, your Discord user ID, username, avatar, and whether you boost our server. We do not receive your Discord password or messages.
• Your page: everything you add to it — text, links, images, video and audio.
• Sessions: for each device you sign in on, the IP address and browser type, so you can review and revoke them.
• Activity: likes and comments you leave, and totals of views on pages.

To count one view per visitor per day, we store a short one-way hash of the visitor's IP address and browser type for 24 hours. It cannot be turned back into an IP address and is deleted automatically.

We set one essential cookie to keep you signed in, and short-lived cookies during Discord login. We do not use advertising or tracking cookies.

We do not sell your data. It is processed by the providers that run the service:

• our hosting and storage providers, which hold the database and uploaded files;
• Discord, when you choose to log in with it;
• our email provider, to send verification and password-reset emails.

Everything you put on your public page is visible to anyone who opens it.

You can edit or remove anything on your page from the dashboard, and sign out other devices in Settings. To get a copy of your data or have your account deleted, open a ticket in our Discord server. Deleting an account removes its page, links, comments and uploaded files.

Depending on where you live, you may have further rights under laws such as the GDPR.

Passwords are hashed with argon2, two-factor secrets are encrypted, uploads are checked and re-encoded, and sign-in attempts are rate-limited. No system is perfectly secure; use a unique password and turn on two-factor authentication.