Privacy policy
Who we are
This site is run by oakmorrow. Contact: materalovaglio42@outlook.com.
What we collect
- Account: the email address you register with, your nickname, your password (stored as an Argon2id hash, so we never see it), the avatar you upload, when you registered and last signed in, and when your membership ends.
- Orders and access: membership and single-purchase orders (item, amount, status and time) and the works you bought. We do not store card or payment-account details.
- Viewing and activity: which works you viewed and on which day, how you viewed them (preview, membership or purchase), your daily viewing allowance, your favorites, and when you used the share feature.
- IP address: the daily allowance of visitors who are not signed in is counted by IP, so a visitor's viewing records keep the IP. The IP is also recorded when you save a favorite or share a work. Abuse limits for sign-in, codes and sharing keep only hashed IPs and email addresses.
Cookies and browser storage
- Sign-in cookie: keeps you signed in for up to 30 days, ending after 7 days without use.
- Email verification cookie: ties a verification code to your browser for 1 hour.
- Share cookie: a random identifier used to count shares of a work, kept for 30 days.
- The position and speed of audio works are saved in your browser only and are not sent to us.
- We use no advertising or third-party analytics trackers.
How we use it
We use this data to sign you in and provide membership access, count the daily viewing allowance, show your viewing history and favorites, count views and shares of works, prevent abuse, and handle support and copyright requests. We do not sell personal data or use it for advertising.
Third-party services
- Email: verification and password-reset emails are sent through Google Gmail, which receives your email address. These are the only emails we send; we send no marketing email.
- Media storage: work media, covers and previews are stored on Cloudflare R2 and your browser loads them from there directly; work images are decrypted in your browser.
- Sharing: sharing to Telegram opens the Telegram website.
How long we keep it
Account data is kept until you ask us to delete it. Viewing, favorite and share records are currently kept with no automatic deletion. Verification codes and sign-in links expire within minutes and their records are cleared within a day.
Your rights and account deletion
You can change your nickname, avatar and password at any time, and see your viewing history and favorites on your account page. Changing your email address yourself is not supported at the moment.
To delete your account and personal data, write to materalovaglio42@outlook.com from your registered address. We then delete your email address, nickname, password, avatar, membership period, sign-in sessions, favorites and purchased access; clear the account, email and IP from share records; keep only the amount and time of orders for bookkeeping; and leave viewing records with nothing that identifies you. Deletion cannot be undone and the account cannot be used again.
Security
Passwords are stored as hashes and sign-in sessions only as hashed tokens. We work to protect your data but cannot guarantee that transmission or storage is completely secure.
Minors
This site is for people aged 18 or over. We do not knowingly collect data from minors.
Changes
When this policy changes we update this page and the date above.