Privacy

This is a plain language summary of what KeiWorld stores about you and why. It is a first draft and will be reviewed before launch.

What we store

• Your account: email address, username, display name, a hash of your password (never the password itself), and optional profile details such as bio, location and avatar.
• What you post: threads, replies, messages, reactions, builds and uploads.
• Abuse protection: your IP address is only kept as a salted hash, used for rate limits and spotting abuse, and discarded after 90 days.
• Last seen: roughly when you were last active, so we can show who is online.

What we do not do

• No advertising and no third party tracking scripts.
• Analytics are cookieless and do not follow you around the web.
• We do not sell your data.
• We never log passwords, tokens, session cookies, message text or email bodies.

Cookies

We use a session cookie to keep you logged in and a few short lived security cookies. There are no marketing cookies.

Photos

Uploaded images have their EXIF metadata, including GPS position, removed before they are shown.

How long we keep things

• Deleted threads and posts are hidden at once and permanently purged after 90 days.
• Unused uploads are deleted a week after they are removed.
• Notifications are deleted 90 days after you read them.
• Rate limit records and download counters are deleted after 90 days.
• Private messages are deleted if either person deletes their account.
• Order records are kept for accounting, with shipping addresses removed 180 days after fulfillment.

Your choices

You can download your data as a file and delete your account from your settings. Deleting your account anonymises it: your email, username, bio and avatar are removed and your posts stay on the forum credited to "Deleted member". If you want your posts removed as well, contact us.

Staff access

Only administrators can see member email addresses, and every time they do it is logged.