Last updated August 2026
We collect as little as the product can function on, and we would rather explain each item than summarise them away. There are no advertising trackers on this site, no cross-site tracking, and nothing is sold or rented to anybody. This is a digital product with no warehouse and no shipping partner, so we have no reason to know where you live beyond what payment and tax law require of us.
Everything below describes what the running system actually does. Where a section says a piece of information never leaves your device, or is stored only as a one-way hash, that is a statement about the implementation and not an aspiration.
The collection page shows every creature registered to one email address, each with its full certificate. Because that is a meaningful amount of access, it is protected by the address itself rather than by a password.
You enter your address and we email a one-time link. The link works once, expires twenty minutes after it is issued, and is stored only as a one-way hash keyed with a server-side secret, so a copy of our database cannot be used to sign in as you. Opening the link exchanges it for a session that lasts seven days, after which you sign in again. The session is shorter than our other links precisely because it unlocks every certificate an address holds at once rather than a single creature.
The page that asks for your address answers identically whether or not that address has any creatures. We do this deliberately: an honest “no creatures found” would turn a public form into a way of checking whether a particular person had bought something here.
Offering a creature to somebody sends them an email, so the person you name will learn your email address if you signed the gift, and will see whatever note you wrote. Only offer a creature to somebody you are happy to have that contact with.
A gift is an offer, not an immediate transfer. Nothing about the creature changes until the recipient accepts. If they accept, they may include a thank-you note, which we email to you along with the news; if they decline, or if you cancel first, we tell you that instead and nothing moves. An unanswered offer lapses after thirty days.
We keep the gift record after it is answered, including both addresses and both notes, because it is the history of how a creature came to belong to somebody. The public creature page never shows either address, either note, or the fact that a creature was gifted at all.
A sale on the marketplace involves two people who have no reason to know anything about each other, and it is built so that they do not.
We keep the sale record — both addresses, the price and the date — because it is the history of how a creature came to belong to somebody, and because an invoice has to keep printing. The public creature page never shows either address, the price, or the fact that a creature was ever sold.
Your credit balance and every movement in it are visible only to you, on your collection page, behind the same signed-in session that shows your certificates.
The verifier on the explore page can scan a certificate barcode with your camera, or read one from an image you choose. Both run entirely in your browser: camera frames and uploaded images are decoded on your device and are never uploaded to us. The only thing that leaves your browser is the decoded signature itself, sent to our verifier to be checked. Camera access is asked for when you tap “Scan barcode”, used while the scanner is open, and released the moment it closes.
There are four, all strictly necessary, and none used for tracking or advertising. The first links your browser to the purchase you just made, so we can show you your creature. The second is set when you open your private link, so you can rename your creature without signing in again. The third is the collection session described above. The fourth is for administrators.
All four are HttpOnly, so no script on the page can read them, and none contains personal data. They carry random secrets, or in the collection session's case a signed value naming the address that signed in. We store only one-way hashes of the secrets, so a copy of our database cannot be replayed to impersonate you.
Your browser may also keep a small note recording that you have dismissed the cookie message, and a random analytics id that lives in the tab and disappears when you close it. Neither is sent anywhere as a cookie and neither identifies you.
Your creature's number, traits, name and creation date are public on its page. Your country is shown by default and stays public unless you hide it. Your creature's certificate appears publicly only in redacted form; the full signature is issued to you alone, on your receipt, behind your private link, and in your collection. Your email address, billing name and billing address are never shown publicly.
The statistics page publishes counts only: how many creatures exist, how the rarities fall, which traits have appeared, and how many countries are represented. It is built from aggregates and names nobody.
That is the entire list. We do not sell or rent personal data, and we have no advertising partners to share it with.
Creature data is kept for as long as the project runs; it is the point of the project. Email addresses are kept so your private link and your collection keep working. Billing details are kept as part of the payment record, and payment records are kept as long as tax and accounting law requires. Gift records are kept as the history of a creature changing hands. Analytics events are kept for up to twenty-four months.
Collection sign-in links are the exception, and are deliberately short-lived: each one expires twenty minutes after it is issued and is marked used the moment it is opened.
Capability tokens and sign-in links are stored only as one-way hashes, keyed with a server-side secret. Certificates cannot be forged without that secret. Payments never touch our servers. The collection page is never cached, so no shared cache can hold one person's certificates and serve them to somebody else. No system is perfectly secure, but ours holds very little worth stealing, by design.
You can ask us for a copy of your data, ask us to correct it, or ask us to delete your email address and billing details and detach them from your purchase. Deleting your email means your private link and your collection stop working, and we can no longer prove the creature is yours, so we will confirm with you before doing it.
Write to us at hello@1mtinycreatures.com from the address you used at purchase. Depending on where you live, you may also have the right to complain to a data-protection authority.
This is a family-friendly product, but it is not intended for children under 13 to purchase. If you are under 13, please ask an adult to buy on your behalf. We do not knowingly collect personal data from children.
If we change what we collect or why, we will update this page and its date. We will not quietly start collecting more than this page says.