Less data. Clear purpose.
Do not enter your address, identity documents or financial details. Your profile is not public.
What is stored
Nickname, Argon2id password hash, recovery-code hash, preferences, optional profile details and fictional history. Passwords and recovery codes are not stored as plaintext. The recovery key is shown only once.
Cookies and access
An HttpOnly cookie maintains a session for up to 12 hours, expiring after one hour of inactivity. Another cookie stores language. Abuse prevention uses temporary HMAC-derived IP identifiers. No analytics, advertising or tracking pixels.
Photos and external sources
In the default deployment, photos are imported from Unsplash and served by this site. Opening a paper or photo credit visits an external service subject to its policy. We do not send your fictional purchases to those services.
Deletion and retention limits
You can export data and delete your account using your current password. Deletion removes active-database records. Infrastructure logs and backups are operator-controlled; the included backup tool removes backups older than 14 days when run, by default. Confirm the effective policy with the operator.
No financial collection
Registration asks for no email, phone, ID, card, payment details or delivery address. Optional fields should not contain sensitive data. This version has no public profiles or user-to-user messaging.