Privacy

The short version

We collect as little as we can get away with. No advertising trackers, no cross-site tracking, no selling anything to anyone. This is a digital product: we have no warehouse, no shipping partner, and no reason to know where you live beyond what payment and tax law require.

What we collect

• Your email address, if you give us one, so we can send you your creature and the private link back to it. We do not send marketing email.
• Your country, from your connection, as a two-letter code. It is shown on your creature's page as where the creature was found; you can hide it with one tick while naming your creature, or by renaming it later.
• Payment records — amount, tax, currency, status, and Stripe's identifiers. We never see or store your card details; Stripe handles the payment entirely.
• Billing name and address, if Stripe collected them — kept for exactly one purpose: printing them on the receipt you can download. They are never shown publicly, never used for marketing, and never used for delivery, because nothing is ever delivered.
• Your creature's data — its number, its traits, the name you gave it, and its certificate.
• Product analytics — which pages were viewed and which buttons were pressed, tied to a random id that lives in your browser tab and is discarded when you close it.

What we do not collect

• Card numbers. These never reach our servers.
• Your IP address. It is used in memory to derive a one-way hash for rate limiting, and not stored.
• Your phone number or date of birth.
• Your precise location. The country code is as fine-grained as it gets.
• Anything from advertising networks or third-party trackers. There are none on this site.

The camera, and uploaded card images

The verifier on the explore page can scan a certificate barcode with your camera, or read one from an image you choose. Both run entirely in your browser: camera frames and uploaded images are decoded on your device and are never uploaded to us. The only thing that leaves your browser is the decoded signature itself, sent to our verifier to be checked. Camera access is asked for when you tap “Scan barcode”, used while the scanner is open, and released the moment it closes.

Cookies

Three, all strictly necessary, none used for tracking or advertising: one that links your browser to the purchase you just made so we can show you your creature; one set when you open your private link so you can rename your creature; and one for administrators. All are HttpOnly, and none contain personal data — only random secrets. We store only hashes of those secrets, so a copy of our database cannot impersonate you.

What is public

Your creature's number, traits, name and creation date are public on its page. Your country is shown by default and stays public unless you hide it. Your creature's certificate appears publicly only in redacted form; the full signature is issued to you alone, on your receipt and behind your private link. Your email address, billing name and billing address are never shown publicly.

Who we share with

• Stripe — to take the payment. Stripe's own privacy policy applies to what you enter on their checkout page.
• Our email provider — to deliver your creature email.
• Our hosting and database providers — to run the site.

That is the entire list. We do not sell or rent personal data, and we have no advertising partners to share it with.

How long we keep it

Creature data is kept for as long as the project runs — it is the point of the project. Email addresses are kept so your private link keeps working. Billing details are kept as part of the payment record. Analytics events are kept for up to 24 months. Payment records are kept as long as tax and accounting law requires.

Security

Capability tokens are stored only as one-way hashes. Certificates cannot be forged without a server-side secret. Payments never touch our servers. No system is perfectly secure, but ours holds very little worth stealing, by design.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete your email address and billing details and detach them from your purchase. Deleting your email means your private link stops working and we can no longer prove the creature is yours, so we will confirm before doing it. Contact us from the address you used at purchase. Depending on where you live, you may also have the right to complain to a data-protection authority.

Children

This is a family-friendly product, but it is not intended for children under 13 to purchase. If you are under 13, please ask an adult to buy on your behalf. We do not knowingly collect personal data from children.

Changes

If we change what we collect or why, we will update this page and its date. We will not quietly start collecting more than this page says.