Your work. Your choices.

What is stored

We store your username, display name, password hash, recovery-code hash, profile, projects, images, comments, ratings, saved projects, follows, blocks, messages and reports. Email is not required. Sessions use an essential HttpOnly cookie. Security logs use a keyed hash of your network address; server logs may retain IP addresses.

Public and private

Published projects and profiles are public and may appear in search engines. Drafts are private. Room chat is visible to signed-in members. Direct messages are limited to the participants but are not end-to-end encrypted; server operators can technically access stored data. Calls use browser media permission, peer connections and public STUN discovery. We do not record calls.

Control and retention

Export or delete your account from Account settings. Deleted account content is removed from the live database; backups can retain it for up to 14 days. Unreferenced uploads are cleaned after 48 hours. We use no advertising analytics and do not train generative models on your content. External links are optional; we do not automatically send your projects to Rumapa or AI services. Questions and privacy requests can be sent to @founder through private messages.

Updated November 12, 2026