Privacy

What we store

• Your account: username, email address, a hash of your password (never the password itself), your display name and bio if you set one, and when you confirmed your age and email.
• Your uploads: the files themselves, their sizes and checksums, and whatever you typed into the listing.
• Activity: when you last signed in and the IP address you signed in from; a record of each download (which file, which member, which IP, when); and failed sign-in counts used to lock an account after repeated attempts.

We do not use third-party analytics, advertising, or tracking pixels. The only external request a page makes is to Google Fonts for two typefaces.

Why we keep the download log

Because the alternative is worse. When a creator says their paid work has been re-uploaded here, the log is what lets us see the scale of it and answer them properly. It is not used for anything else, and it is not shared.

Cookies

Two, both strictly functional: a session cookie that keeps you signed in, and a cookie recording that you confirmed you are 18 or over. No advertising or analytics cookies are set, so there is no consent banner to click past.

Who can see your data

Other members see your username, display name, bio and your published listings. Your email address is never shown to another member. Administrators can see account records and the moderation queue.

We do not sell or share member data. It is disclosed only where we are legally required to.

Deleting your data

You can delete any listing yourself, which removes the stored files. To close your account entirely, email [email protected] from the address on the account. Closing it removes your account record and your uploads.

Security

Passwords are hashed with PHP’s current default algorithm and re-hashed when that default moves. Uploaded files are stored outside the web root and are only ever served through an access check — there is no URL that reaches them without one. Repeated failed sign-ins lock an account temporarily.

No system is perfect. If you find a security problem, please report it to [email protected] before disclosing it publicly.