What is kept, and why

This service stores what it needs to give you an account and keep your models, and nothing it does not.

About you

• Your email address — to sign you in and to send the two kinds of letter an account needs: confirming the address, and resetting a forgotten password.
• The name you choose, shown beside anything you publish.
• Your password, as an Argon2id hash. The password itself is never stored and cannot be read back, by us or anybody.
• For each signed-in session: when it started, the browser it was started from and the network address. A session unused for 30 days is deleted.
• Counts of recent sign-in and reset attempts, to slow down guessing. They are deleted after a day.

Your models

The files you upload, and what you write about them. A model is visible only to you unless you publish it.

Who else handles it

Letters are delivered by Resend, which receives the address and the letter to send it. The service runs on one server; there are no analytics, no advertising and no scripts from anywhere else on these pages.

Deleting it

Deleting your account from settings removes your account, your sessions and your models, with their files, at once.