Privacy
This catalogue holds as little about you as it can, and this page says exactly what that is. An account is optional, and there is no advertising and no third-party analytics.
What is recorded
| What | Why | How long |
|---|---|---|
| Search terms | A search that finds nothing is what tells the catalogue what to make next. Terms are recorded without anything identifying who typed them, and the same term is counted once per ten minutes rather than once per keystroke. | Rolling; the most recent are kept and older rows are dropped. |
| The identity on a licence | An email or wallet address you supply when buying, so a licence can be matched to a buyer. Supplying one is optional; a licence issued without it still works. | 730 days, then redacted from the licence while the sale itself is kept. |
| Your account, if you sign in | The email address or phone number you signed in with, and your name if Google supplies one, so the pictures you asked for can be credited to you and your earnings shown to you. Signing in is handled by Google Firebase Authentication, which receives what you type into the sign-in window; this catalogue receives only the signed token that proves it. | Until you delete your account, which you can do yourself from the Earnings page. |
| Your earnings | One line per licence sold of a picture you originated: the price, your share and the amount, and a line for each payout. It is the other half of a sale, so it has to balance. | Kept with the sales it belongs to. Deleting your account removes your name, email and phone number from it; the amounts stay, attached to nobody. |
| Download redemptions | A counter on each licence, so one signed link cannot be shared without limit. | With the licence. |
What is not
- No advertising, no tracking pixels, no third-party analytics.
- No cookies for tracking. Recent searches and your own licences are kept in your browser’s local storage, on your device, and are never sent anywhere.
- No profile is built, and nothing is sold or shared for marketing.
Erasure
Ask and the identity on your licences is redacted. The licence, its date, its type and its amount are kept, because they are the record of a sale that has to balance; the email does not survive it. The redaction is itself recorded, so the gap in the record is explained.
Where it lives
This is a self-hosted catalogue. Everything above is stored by whoever runs this instance, on their own machine, and backups of it are taken on their own schedule. Apart from sign-in, which Google Firebase handles, it is not sent to a third party by this software.
Generated images and people
Every asset here is generated. The catalogue refuses requests for real or recognisable people, so an asset should not depict anybody. If you believe one resembles a real person, say so and it will be pulled.