Privacy

• Your username, your email, and a hash of your password (scrypt + salt). We never store the plain-text password.
• Your profile content: display name, bio, links, networks, widgets, badges, audio, and the files you upload.
• A record of your profile’s visits and clicks: date, time, referring page, and device type.
• A session cookie, httpOnly, expiring after 30 days.

• We don’t sell or share your data.
• We don’t use advertising or tracking cookies.
• We don’t load third-party scripts on your profile or dashboard.
• We don’t show ads on any page of the service.

When someone opens your profile we record the date, the time, the page they came from, and whether they used mobile, tablet, or desktop. The full address is stored exactly as it arrives in the Referer header, and it can be deleted from Settings → Analytics.

It’s an aggregated metric so you can see where people come from. We don’t use it to identify anyone, and we never share it with third parties.

From Settings you can export your entire profile as JSON and delete it completely, including uploaded files. If you need anything that isn’t there, write to [email protected].

In the SQLite database of the server running this instance. If you run your own install, the data never leaves your machine.