Privacy

Reading this archive needs no account. It uses limited anonymous audience measurement and the short-lived technical logs needed to serve and protect the site. Everything else below is about what happens if you make an account.

Who is asking

The archive is built and run by one person, madmaick, and by nobody else. There is no company behind it and nothing here is sold. Anything on this page can be raised through the contact form, which reaches that person directly and privately.

Your email address

It is the only thing an account requires, and the only thing it is used for is sending you a code to sign in. There is no password, so there is no password to lose. It is never shown on any page, never given to anyone, and never used to send anything you did not ask for.

It is held by Supabase, which runs the database and the sign-in, and passes through Brevo, which delivers the message. Neither is permitted to use it for anything else.

What is public, and only if you say so

A profile becomes visible when you choose a username, and not before. It then shows your display name, your description, the avatar and banner you picked from the archive, your favourite Agent, your badges and any collection you marked public.

What you save is private. What you like is private unless you turn on showing it. A collection is private until you decide otherwise. None of this changes by itself, and none of it is used to rank or recommend anything.

Corrections and the files you attach

A correction you send is readable by you and by moderators. Screenshots go to private storage that has no public address at all: a moderator opens one through a link that is created when they click and stops working five minutes later.

Attachments are deleted ninety days after the correction they belong to is settled. A screenshot sent as evidence was sent so that somebody could look at it, not so that it could be kept.

Where it is kept

Account data stays in Europe. The database, the sign-in and the files attached to corrections are held by Supabase in Frankfurt. The pages are rendered by Vercel in Frankfurt. The sign-in email is delivered by Brevo, a French company. Anonymous audience statistics are processed separately by Vercel and are never tied to an archive account.

The artwork itself is served from Cloudflare’s network worldwide, which is the point of a network: an image should arrive quickly wherever you are. Nothing there is about a person, including the avatar and banner on a profile, which are archive artwork rather than photographs of anyone.

Why any of it is allowed

Your address is held because you asked for an account and it cannot work without one: that is a contract you entered by signing up, not consent you can be nagged into. What you save, collect and correct is held for the same reason, since it is the account.

Server logs are kept because a service that cannot see its own errors cannot be run or defended from abuse. That is a legitimate interest, and it is why those logs are short-lived and never joined to an account.

How long

• An account and everything in it: until you ask for it to be deleted.
• Files attached to a correction: ninety days after it is settled.
• Corrections themselves: kept, because the archive has to be able to show who changed a record and why. The name attached to one goes when the account does.
• Server logs: as long as Vercel and Supabase keep them, which is days rather than years.
• Analytics: the temporary visitor hash is discarded after twenty-four hours. Only aggregated audience statistics remain available in Vercel’s reporting window.

Cookies

One when you sign in, so that the account survives loading the next page. Vercel Web Analytics uses no cookie. There is no advertising cookie and nothing that follows you to another site, which is why this page is not a banner you have to dismiss.

Analytics

Vercel Web Analytics counts page views using anonymous, aggregated data and no cookie. It records the public page or route, referrer, approximate country, device type, operating system and browser. It does not receive email addresses, archive account identifiers or custom behavioural events.

Admin, account, authentication and API routes are excluded. Query parameters are removed before a page view is sent, and public profile addresses are reduced to one anonymous /u/[profile] route. Global Privacy Control and Do Not Track are honoured automatically. You can also disable the measurement on this browser below.

What the servers record on their own

Vercel serves the pages and Supabase answers the database, and both keep request logs for a short period, including the address a request came from. That is how any web service is operated and how abuse is dealt with. Those logs are not read for anything else and are not combined with your account.

Getting it back, or getting rid of it

You can ask for a copy of everything held about you, ask for it to be corrected, or ask for the account and its contents to be deleted. Ask through the contact form from the address the account uses.

Being straight about it: there is no button for this yet, and requests are handled by hand. That is honest rather than ideal, and a request is answered within a month.

Deleting an account removes the profile, what it saved, its collections, its badges and the corrections it sent, along with any attached files. Corrections that were accepted have already changed the archive, and those changes stay: they are facts about artwork rather than facts about you.

Children

This is not a service for children, and an account is not knowingly created for anyone under thirteen. If you believe one has been, say so and it will be removed.

Changes

If what is collected changes, this page changes first and the change is recorded in the patch notes. Nothing new is collected quietly.

This describes what the archive does, in the words of the person who built it. It is not legal advice, and it is not a substitute for reading the terms of the services named above.