Privacy

This is a personal project on a single rented server. The short version: no analytics, no third-party scripts, no cookies, no ad or tracking pixels anywhere on this domain.

What is stored

Media you upload, its derived renditions, and a row per asset with the metadata shown in the API. Access logs keep timestamp, requested path, response code and byte count for fourteen days, then rotate out. IP addresses are truncated before they hit disk.

What is not

No account profiles beyond an API token, no email lists, no session cookies, no fingerprinting, no data sold or shared with anyone. There is no third-party embed on any page here — the fonts are the ones already on your device.

Deletion

Delete an asset through the API and the renditions go with it on the next sweep, within an hour. Once a token is revoked, everything associated with it is wiped the same day.

Last updated when this page was deployed — build cf21e887, 2026.