1. Information we collect

The Operator collects the following information:

1. Account information: Email address, user ID, and registration time.
2. Device and authentication information: Device IDs; hashes of device tokens, sign-in links, sessions, and passphrase access tokens; creation and expiration times; and last-used times.
3. Uploaded data: Screenshots, image titles, file sizes and dimensions, album names and descriptions, display order, tags, favorites, visibility, Minecraft server names and addresses, short URLs, and expiration dates.
4. Protection settings: Salts and hashes derived from passphrases. The passphrases themselves are not stored.
5. Subscription information: Stripe Customer, Subscription, and Price IDs; subscription status; billing interval; price; scheduled cancellation time; and payment success or failure. Stripe handles card numbers and other payment credentials, which are not stored in the Operator’s database.
6. Usage and security information: Upload and access times, error and processing logs, IP and email addresses transformed into keyed hashes for rate limiting, and technical information accompanying browser and network communication.

2. Purposes of use

1. To provide image storage, short-URL sharing, albums, visibility controls, and other Service features.
2. To authenticate devices, send magic links, maintain sessions, and verify identity.
3. To process Plus enrollment, payment, subscription status, cancellation, and support.
4. To manage expiration, usage limits, migration, and other plan-specific features.
5. To detect and prevent unauthorized access, passphrase guessing, excessive device registration, and violations of the Terms.
6. To investigate failures, improve quality, understand usage, and send operational notices.
7. To comply with legal obligations and address disputes or rights infringements.

3. Cookies and locally stored authentication information

1. The Service uses an HttpOnly, Secure, SameSite=Lax session cookie to maintain sign-in for up to 30 days.
2. A similarly protected cookie maintains permission to view passphrase-protected content for up to 24 hours.
3. The Fabric Mod stores a token on your device to identify it and authenticate uploads.
4. A SameSite=Lax preference cookie stores the language selected in the footer for up to one year.
5. These technologies are necessary to provide and secure the Service. The Operator does not use advertising-tracking cookies.

4. Public and shared content

1. Uploaded Data shared with anyone who has the URL can be viewed by anyone who knows it.
2. Passphrase-protected Uploaded Data can be viewed by people who know both the URL and the passphrase. You are responsible for managing disclosure of the passphrase.
3. Private Uploaded Data can generally be viewed only by its signed-in owner.
4. Information you share with another person may be stored or reshared by that recipient.

5. Service providers

The Operator entrusts information to the following providers only as necessary to provide the Service. They may use infrastructure outside Japan.

1. Cloudflare, Inc.: Workers, D1, R2, Queues, email delivery, Turnstile, content delivery, security, and logging infrastructure.
2. Stripe, Inc. and its affiliates: Payments, recurring billing, Customer Portal, and fraud prevention.

Each provider’s privacy policy applies to its handling of information.

6. Disclosure to third parties

The Operator does not provide personal data to third parties except with your consent, as required by law, when necessary to protect life, body, or property, in connection with a business succession, or when processing is entrusted in a manner that is not legally treated as third-party disclosure.

7. Retention and deletion

1. Image files are generally retained until the expiration shown at upload. As of this Policy’s effective date, the period is 30 days for Free and 365 days for Plus.
2. When you delete an image or its retention period expires, the image is scheduled for deletion. Short processing delays, cached copies, or disaster-recovery remnants may temporarily remain.
3. Magic links remain valid for 15 minutes, sign-in sessions for 30 days, and passphrase viewing permission for 24 hours.
4. Account information, subscription and transaction records, security logs, and minimal metadata about deleted data are retained only as necessary for operation, legal compliance, dispute handling, and abuse prevention, then deleted or de-identified.

8. Security measures

The Operator uses measures appropriate to the information handled, including access controls, hashing of authentication tokens and passphrases, encrypted transport, separation of privileges, rate limits, log monitoring, and expiration-based deletion. However, internet security cannot be guaranteed completely.

9. Requests for disclosure, correction, or suspension

Subject to applicable law, you may request notice of purpose, disclosure, correction, addition, deletion, suspension of use, erasure, or suspension of third-party provision of your retained personal data. The Operator will verify identity and respond in accordance with law. Use the contact information in the Commercial Transactions Disclosure linked from the footer.

10. Information about minors

Minors must use the Service with consent from a parent or other legal representative. The Operator may request confirmation of that consent when necessary.

11. Changes to this Policy

The Operator may change this Policy in response to changes in law or the Service. Material changes will be announced through the website or another appropriate method before taking effect.

12. Contact

For questions about this Policy, handling of personal information, or disclosure requests, use the Operator contact information in the Commercial Transactions Disclosure linked from the footer.