Privacy & sharing.

Accounts

We store your public username, a salted password hash, account creation time and hashed expiring session tokens. No email is requested and password recovery is not currently offered. The browser stores a session token in session storage for this tab. Sign out to revoke it. Passwords are sent over HTTPS and are not stored in plaintext.

What becomes public

Published worlds include your username, title, description, tags, attribution, chosen license, game version, preview and downloadable save. Forum titles, posts, replies and usernames are public. Only your explicit submission uploads content. Local game feedback and other saves are not automatically published.

Abuse protection and hosting

Cloudflare processes network requests and may retain infrastructure logs. The application uses a secret-keyed hash of your IP address for short-lived rate limits and download counts. Sessions expire after 30 days. Expired counters and sessions are cleaned hourly. Reports and moderation records are retained for community safety.

Control your content

Use Withdraw on your own posts or worlds to remove them from public access. This is not immediate erasure from all storage or backups, and copies already downloaded by others cannot be recalled. For account or data requests, contact the operator through a forum report identifying your request without including sensitive information.

No advertising trackers

This site adds no advertising trackers or third-party analytics. Cloudflare provides delivery and security. Any future Discord service has its own privacy policy. The private development repository is not required to use this website.