!

Draft, not yet in force. Highlighted details still need to be completed and the text needs legal review before launch.

The small print, made clear.

How the service works, what we do with your data, and the rules that keep it running.

How we protect your data

Encrypted storage
Images, usernames and email addresses are encrypted whenever they are stored. Passwords are kept only as salted hashes, so nobody can read them, including our founder and developers.
No routine staff access
Our founder, developers and staff don’t browse your images or account details. Access happens only when needed to act on a report of illegal content, comply with a legal order or fix a security problem, and each access is logged. Anyone with an image’s link can view it, and usernames are shown publicly.
IP addresses, only to protect the service
We hold your IP address and approximate location, worked out from that IP address, to protect our systems from flooding and similar attacks. They are erased as soon as you log out or your visit ends, meaning [30 minutes] without activity. We keep them longer only if they are linked to an attack, a report of illegal content or a legal order.