Privacy Policy

1. What we collect

From the account you sign in with

When you sign in with Discord, Bluesky, Twitch, Tumblr, Facebook, Google or Patreon, that service tells us:

• an account ID, so we recognize you next time;
• your username there (Discord, Bluesky, Twitch and Tumblr only), which we offer as your Enspyration username; and
• your profile picture. We keep a copy only if you choose to use it.

We never see your password for those services, and we don't ask for your email address, real name, friends or contacts.

What you give us

• Date of birth (required). Kept private, see How we use it.
• Your username, display name, bio and profile picture.
• An optional birthday (month and day only) for the birthday party hat.
• Everything you post: titles, descriptions, uploaded images, audio and video (with their original file names), event dates and places, whether a post is NSFW, and your projects and folders.
• Your likes, the creators, projects and folders you follow, your description templates, your settings, and any cross-posting choices.
• That you accepted the Terms of Service and this policy, which version, and when.

Collected automatically

• Cookies that keep you signed in (see Cookies).
• View counts on posts. We count views; we don't record who viewed what.
• Your IP address, held in memory for about a minute to stop people flooding the site with requests. Our own server doesn't store it. Cloudflare, which carries traffic to our server, also processes it (see Other services).

2. How we use it

• To run Enspyration: signing you in, showing your profile and posts, building your Subscribed feed from what you follow, and remembering your settings.
• To check your age: your date of birth decides whether you can have an account (16 or older) and whether NSFW posts can reach you (18 or older). We don't use it for anything else and never show it to other members.
• To keep Enspyration safe: moderating content, enforcing the Terms of Service, and limiting abuse.

We don't show ads, we don't use analytics or tracking tools, and we don't sell or rent your personal information or share it for advertising.

Where privacy laws ask for a legal reason: we use your information to provide the service you signed up for (our agreement with you), to keep the site safe (our legitimate interest), and to meet legal duties such as age rules.

3. Who can see what

Nothing on Enspyration can be seen without signing in, but anyone 16 or older can sign up, so think of what you post as public.

• Every signed-in member can see your username, display name, profile picture, bio, staff badge, join date, projects, folders, posts, like counts, and the lists of who you follow and who follows you. NSFW posts are only shown to members who are 18 or older.
• Your birthday (month and day) is shown only if your birthday hat is turned on.
• Only you can see your full date of birth, your settings, your templates, your cross-posting plans and which sign-in accounts you've connected.
• Staff (the Owner, Co-Owners and Site Moderators) can see your age (not your date of birth) and anything needed to moderate, including the profiles and posts of suspended accounts. The Owner and Co-Owners can correct a date of birth when asked. What staff do is recorded in a moderation log that staff can read.

We share personal information outside Enspyration only with the services in section 5, or if the law requires it, for example to report child sexual abuse material or to answer a valid legal request.

4. Cookies

We only use cookies that Enspyration needs to work. There are no advertising or analytics cookies.

Your browser's session storage is also used to show a one-time message after some actions (like "Published!"). It's cleared when you close the tab.

5. Other services involved

• The service you sign in with (Discord, Bluesky, Twitch, Tumblr, Facebook, Google or Patreon). Signing in sends you to them; their own privacy policies apply there.
• Cloudflare carries traffic between your browser and our server and protects the site. It processes your IP address and the requests your browser makes.
• Google Fonts. Our pages load their fonts from Google, which receives your IP address and basic browser information when it sends them.
• Cross-posting to Facebook, Bluesky or Patreon isn't switched on yet. When it is, we'll only send the posts you choose to the sites you choose.

Your information is stored on a server that Enspyration runs. The services above may process it in other countries.

6. How long we keep things

• We keep your information for as long as you have an account.
• When you delete a post, it's removed along with its file, likes and views.
• When you delete your account, we remove your profile, picture, projects, folders, posts, files, likes, follows, templates, settings, date of birth and connected sign-in accounts straight away.
• Moderation log entries keep the username involved and what happened, so staff decisions can be reviewed later.
• An unfinished sign-up (and its copied picture) is deleted after an hour. Sign-in sessions end after 30 days without use.
• If someone gives a date of birth under 16 while signing up, we keep a scrambled (one-way hashed) form of their sign-in account ID until the date they turn 16, so they can't sign up again before then. Nothing else about them is kept.
• Deleted information may stay in backup copies for a short time before they're overwritten.

7. Your choices and rights

• Change your display name, bio, picture, birthday and NSFW display choices in Settings, and your username under Settings > Account.
• Connect or disconnect sign-in accounts under Settings > Connected accounts.
• Edit or delete any of your posts, sign out of your other devices, or delete your whole account.
• Ask us for a copy of your information, or to correct something you can't change yourself (like your date of birth), by contacting us.

Depending on where you live (for example in the European Union, the United Kingdom or California), you may have legal rights to access, correct, delete or take a copy of your information, to object to or limit how we use it, and to complain to your local data protection authority. Contact us to use any of these rights. We won't treat you differently for using them.

8. Age

Enspyration is not for anyone under 16, and we don't knowingly collect information from them. If we learn that a member is under 16, we suspend or delete the account. If you're a parent or guardian and think your child under 16 has an account, contact us and we'll take care of it.

Members aged 16 and 17 can use Enspyration, but NSFW posts never reach them.

9. Security

We protect your information with HTTPS everywhere, sign-in tokens that we store only in scrambled (hashed) form, uploaded files that are checked and only served to signed-in members, and limits on repeated requests. No site can promise perfect security, but if we learn of a breach that affects members, we'll say so on the site and on our Discord.

10. Changes to this policy

We'll post any new version here and change the date at the top. If the change is important, we'll ask you to read and agree to it the next time you visit.

11. Contact

For privacy questions or requests, contact the Enspyration staff on our Discord server. Look for members with an Owner, Co-Owner or Site Moderator badge.