Privacy

Last updated 6 August 2026.

This describes what the site actually stores and where, in plain terms. It is written to be checked against the software rather than to cover us.

Nothing here is sold, shared with advertisers, or used to train a model. There is no advertising on the site and no tracking script from anyone else.

What we store

  • Your username, display name, bio and profile picture.
  • Your characters: their names, descriptions, the layouts you write, their visibility, and the folders you put them in.
  • The images you upload, including the untouched original of each one.
  • Your comments, favourites, follows, and the transfers your characters have been through.
  • Reports you send, and the moderation decisions taken on your account or your content.
  • Your settings: theme, palette, and whether you have confirmed you want adult content.

Your email address

Signing in is handled here, by us. Your password is stored as a hash we cannot reverse, and if you sign in with Google or Discord we never see a password at all. Nothing about your account is sent to a third party for this, because there is no third party in it any more.

That is worth saying out loud rather than burying: a company other than this one holds the address you sign in with. It is a deliberate choice, because storing passwords badly is the most common way small sites hurt people, and it is written down as something to revisit as the site grows.

Where it lives

Everything else is on Cloudflare: the database, the images, and the code that serves them. No other company receives your content.

Fonts are served from this site rather than from a font provider, precisely so that loading a page does not hand your address to a third party.

Images and metadata

Photographs and exports often carry hidden metadata, sometimes including where they were taken. Every image you upload is stripped of it. The copies shown on the site are re-encoded, which removes it by construction, and the original you keep is cleaned of those blocks without touching a single pixel.

What other people can see

A public character is visible to anyone. An unlisted one is reachable only by its link. A private one is visible to you alone, and its images are served only against a short lived key issued to someone already allowed to see them, so a leaked link stops working.

Transfer history is public and permanent by design. That is the point of it: a record of who made and owned a character is worth nothing if it can be quietly rewritten.

Taking it back, and leaving

Your settings hold a full export, immediately and without asking: your account, your characters with their raw layouts, your folders, transfers, favourites and comments, plus every original image and its credits.

Deleting your account removes your content. Two things survive on purpose: the public transfer history of characters that changed hands, which belongs to their new owners as much as to you, and moderation records, which exist so decisions can be reviewed.

Cookies

A session cookie, so you stay signed in. No analytics cookie, no advertising cookie, nothing that follows you off this site.

Contacting us about your data

A published address is still missing and will be here before the site opens. The export above already covers what most requests would ask for, and it does not require anyone to answer.

Hollowden

A sheltered place where creatures live.

Made and run by one person.