Privacy

What we store about you

Your username, and your password in a scrambled form (a PBKDF2 hash) that nobody can read back. Your recovery code is stored the same way.

Anything you choose to publish: your bio, your submissions and your reviews. These are public by design.

We do not ask for your email address, your real name or your location.

Cookies

We set one cookie, sm_session, when you log in. It keeps you signed in for up to 30 days and is needed for the site to work. It is not used for tracking and is never shared.

IP addresses

To stop spam and password guessing, we record the IP address behind sign-ups, logins, account recovery and contact messages for up to 24 hours, then delete it.

Our hosting provider, Vercel, keeps its own short-lived request logs, as described in its privacy policy. Pages load fonts from Google Fonts, so your browser also connects to Google when you visit.

Messages you send us

If you use the contact form we store your message, and the reply address if you give one, so a steward can answer. We use it only for that.

Where the data lives

The site runs on Vercel and the database on Turso, both in the United States. They process data for us and are not allowed to use it for anything else.

Your rights and choices

You can delete your account at any time from the Account page. That removes your password, bio and recovery code. Writing that is already sealed stays public under your username, because it is shared under CC BY-SA and the verifiable chain cannot be rewritten.

To see what we hold about you, or to ask for something else to be removed, use the contact form with the topic Privacy. We answer within 30 days.

Age

You must be at least 13 years old to create an account.

Changes

If this policy changes in a meaningful way, we will say so on the home page before it takes effect.