Information the service holds
The service stores your account name, email, password hash, theme and optional profile details and uploaded images. It also stores submitted sites, ownership verification information, banners, placements, credit history, support messages and attachments, contact messages, payment/order records, optional referrals and website partnerships.
Why information is used
Information supports sign-in, account security, website review, banner delivery, credit accounting, support, payments and abuse prevention. Security actions and administrator actions may be recorded in audit history. Email-change confirmation messages are sent to the new address, and a notification is attempted to the existing address. Required account, security, support and billing messages are separate from optional news preferences.
Exchange traffic and analytics
The exchange uses request information, including IP address and browser user agent, to derive visitor hashes for duplicate-view and traffic checks. Request metadata may also appear in hosting logs, audit records and payment records. Optional first-party analytics records usage when enabled by the operator. This is not a guarantee that every collected record is anonymous.
Cookies and local storage
A session cookie keeps you signed in. Optional Remember Me uses a persistent cookie, normally valid for 30 days, with a corresponding hashed token in private storage. Theme preferences may be stored in your account or browser. Signing out other devices invalidates their session fingerprints and Remember Me tokens.
Public information
Approved website listings, banners, public profile details and accepted partnerships can be visible to visitors and participating websites. Profile visibility controls affect your profile; they do not make approved website listings private. Adult artwork is masked in public network cards. Advertising destinations remain external websites with their own practices.
Service providers
Hosting and email providers may process operational information. Enabled payment gateways process checkout and callback information. Enabled Cloudflare Turnstile checks are handled by Cloudflare. Font assets may be requested from Google Fonts. Optional breached-password screening sends only a five-character SHA-1 hash prefix to Pwned Passwords, never the password or complete hash. Which providers are active depends on operator configuration.
Security and retention
Passwords are hashed; two-factor secrets and configured service credentials use application encryption. No service can promise perfect security. Records are kept while needed for operation, support, accounting, abuse prevention and applicable obligations. This version has no universal automatic retention schedule. Closing your account disables access and exchange activity; records, uploads and backups remain pending the operator's retention review.
Your choices and requests
You can edit your profile, change email after confirmation, choose content and stored email preferences, revoke other sessions, download an account export and close your account. Scheduled embed-health warnings and newsletters are not implemented in this release. Use Contact to request access, correction or removal of information. The operator may need to verify your identity and retain some records for legitimate obligations. Contact the operator for details about this installation's providers and retention practices.