Privacy information

Profile, drafts and account changes

Your optional display name, biography and website appear on your public profile. Saved listing notes contain text only. Private design workspaces also store complete packs and version history for their owner and administrators; publication requires an explicit review submission.

Private change requests share only the pinned proposal and discussion with the contributor, original creator and administrators. Other private revisions remain restricted to their owner and administrators. Paid-source requests stay private. Existing purchasers can access the last approved pack of a creator-hidden listing, but cannot see new private work. Activity read markers remain private.

Email-change requests record the old and proposed addresses privately. The current address stays active until the new address is confirmed; confirmation revokes old sessions and account links and queues a security notice to the old address. Password changes and Sign out other sessions also revoke older sessions and account/editor links.

Creator installation photos are re-encoded without embedded metadata before storage. Pending photos are visible only to their creator and staff; approved photos, captions and credits are public while the design is published. Withdrawal removes the public listing of the photo but retains immutable stored files and review records under the portal's existing storage/backup lifecycle.

Information the portal stores

Account records include your email, username, password hash, verification status and account/security timestamps. We store your submitted packs and listing/version history, moderation records, comments and reviews, points/claim/purchase records, counted download/editor-open history, follows and notification choices.

Agent API keys are stored as one-way hashes with their display name, scope, short prefix, accepted Terms version, creation/expiry/revocation and last-use timestamps. The raw key is shown once at creation and is not stored. Active keys are bound to your account security epoch and become unusable after password, session or email changes, or when the account is disabled/unverified.

Public listings, creator names/profiles and visible comments/reviews are public. Your email is hidden from other members by default. You may choose in Profile → Settings to show your verified address to signed-in members on your profile; it remains hidden from visitors who are not signed in. Changing your email hides the new address until you opt in again.

Library membership, notification choices, order claims and staff reporting records are not public profile information. Authorized administrators can view account/contact details and account history and record audited points adjustments. Security/audit records include actions and client IP information.

Sessions and service providers

An essential session cookie keeps you signed in, with a 30-day session lifetime. Password reset invalidates older sessions. The portal does not add a third-party analytics or advertising script.

Traffic may pass through Cloudflare and our reverse proxy for delivery/security. Email is sent through the configured Zoho transport. Packs are processed by our isolated renderer; it does not receive account database or email credentials. Encrypted backups may hold copies of portal records and files.

Email choices

Comments, written reviews, design updates and newsletter messages are optional and start off. Registration offers one optional all-topics choice. You can change each topic in Profile → Settings, unfollow designs/creators, or use the topic-specific unsubscribe link in an activity email.

Verification, password-reset and moderation-decision messages support your account/submissions and are separate from optional activity subscriptions. Delivery work stores references, hashes and capability material protected by an app-only secret, rather than plaintext message bodies or raw account links.

Retention and requests

We retain account and contribution records to operate the service and keep publication, moderation and transaction history consistent. Pack versions and the points ledger are not erased by ordinary request rollback or a listing withdrawal. Verification/reset links have limited validity; unused unsubscribe links expire after 180 days.

Contact us to request access, correction or deletion of your personal information. We will review the request and explain records that need to be retained for transaction integrity, security, moderation or applicable obligations. Administrators can permanently close an account: account contact/login data, biography, website and private email-change addresses are removed, access is revoked and email delivery is stopped. The original username and display name remain on a read-only Former creator profile so designs retain attribution. Published designs, licenses, purchases and immutable history remain; private work stays private. New points purchases from closed creators are paused. Historical transaction, security, content and backup records are handled separately when reviewing the request. Avoid including unnecessary personal information in public descriptions, comments or pack assets.