Privacy

The short version: an account is a name and a password, there is no email, there are no trackers, and nothing is sold or shared.

What is stored, and where

On the server, only if you make an account:

• Your username.
• Your password and recovery words, each hashed with scrypt. They are not stored in a form anybody here can read, which is also why they cannot be recovered for you.
• Your saved avatars, as the manifest bytes the format uses. A manifest is a list of item ids and colours, about a kilobyte.
• A session token, so you stay signed in.

In your browser, whether or not you have an account: your settings, where you had scrolled to in each category, and whether you have dismissed the tips. Saved avatars are not kept here. Signing out removes what is removable and leaves nothing for the next person at the same computer.

Bug reports

If you send a bug report, what you typed is stored along with the item it was about. If you leave the diagnostics box ticked, the report also carries the avatar on the stage, your quality settings, your graphics card and browser as the browser reports them, and any errors the page had already hit. That is the part that makes a report reproducible, and it is the part you can decline: untick the box and none of it is collected.

What is not done

• No analytics, no advertising, no third-party scripts, no cookies beyond the one that keeps you signed in.
• No profiling, and no selling or sharing of anything above.
• No email address is ever asked for, so none can leak.

Deleting it

Clearing a slot deletes that avatar from the account. To have an account and everything in it removed, ask through the contact page and say which name it is.

Last updated: 31 August 2026.