How we handle your data

Your email addresses, together with their SHA-256 and MD5 hashes, which is how sites look up your avatar.

A securely hashed version of your password. We never store or see the password itself.

The pictures you upload, in a few sizes, plus the rating and alt text you give them.

Anything you add to your public profile, such as your name, pronouns, role, location, bio and links.

Once an address is verified, anyone who knows its hash can load the picture you chose for it. The hash cannot be turned back into your email address.

Your profile page and profile data are public only while the Public profile switch is on. Your email address is never shown on it.

We only email you 6-digit codes to confirm an address or reset your password. We do not send newsletters or marketing.

Our emails can contain a small tracking image that tells us whether the email was opened. It helps us notice delivery problems.

We use a single cookie to keep you logged in. It is not used for advertising or tracking across other sites.

You can change or remove any picture, email address or profile detail at any time from your dashboard.

Deleting your account removes your pictures, email addresses and profile. Sites then show their own fallback image for your addresses.

If you have a question about your data, reply to any email we have sent you and it will reach us.