Privacy

Public pages show the name, persona, and avatar of approved templates. Pending submissions are visible on the admin desk only.

Submissions and takedown notices store a hash of the IP address so we can cap traffic at about five a day. The raw IP is not written to the database. The hash uses a salt kept as a server secret. Cloudflare still processes network logs under its own policy.

Avatar files live in Cloudflare R2. Forms use Cloudflare Turnstile. The token is checked on our server, not in the browser.

The admin token lives in a Worker secret and an HttpOnly cookie. We do not sell this data.

To ask for a template to be removed, use the takedown page.