privacy

You sign in through another service rather than with a password on this site. Today that service is Discord, and it is the only way in. This site can add other services later, and this entry describes any of them.

The service sends this site the id it uses for your account, your username there, and the display name and avatar you have set. It also sends your email address.

From those, this site makes an account with a handle and a display name. The handle is the name your own page on this site is found at. You can change both in settings.

This site asks the service for your display name and avatar again each time you sign in. So a change you make there arrives here on your next visit.

This site holds your email address with your account. It uses that address to reach you about something you did here, and for nothing else. Your email address is not public: this site does not show it to anyone, and does not send it on.

The rest is public. This site shows your username, display name and avatar under everything you publish, which is why it holds them.

Each sign-in service sets its own minimum age. Nothing on this site is aimed at children.

When you sign in, this site sets one cookie. The cookie holds a random token and nothing else: no name, no id, nothing you could read.

This site does not hold that token. It holds a SHA-256 hash of it instead. So this site can recognize your cookie without holding anything that works as your cookie.

A session lasts thirty days, or until you sign out. This site refuses an expired session the moment you use it. A job each day deletes the expired ones, so what this site holds is the sessions that are live.

This is the only cookie this site sets. Nothing here sets a cookie for advertising, and nothing here follows you to other sites.

A published preset holds what you typed: its name, its description and its tags. It also holds the preset itself — the colors, the camera angle and the highway settings the preview draws from. All of it is public, under your name. That is what publishing means here.

If you uploaded a file rather than designing one on the site, this site holds that file exactly as it arrived. That file is what people get when they download it. This site never rebuilds an uploaded preset to hand back in its place.

A preset file can carry settings no version of this site understands. Only the original bytes still hold them.

A highway preset can carry two pictures of its own: a background and a side image. This site holds them inside your file, and shows them in the preview. Each picture also has an address of its own here. Anybody who can see the preset can see them.

A file that names a picture also holds where that picture was on your machine. That is a folder path, and a folder path often holds your name on that machine. This site does not show that path, and does not use it. It stays in the file, and the file is what people download. When this site writes a preset file for you instead, it cuts that path down to the name of the picture.

When you delete a preset, this site deletes it: the row, the file it holds, the pictures inside that file, its tags, its likes, and its place in any theme. Nothing stays behind a hidden flag.

One thing you cannot call back is a copy somebody already downloaded. A preset is a file. Once it is downloaded, it is on someone else’s machine and out of this site’s reach.

A like holds which preset, which account, and when. This site counts those to get the number under every preset. It also uses them to show you which presets you have already liked.

A preset shows how many likes it has, not which accounts gave them. When you unlike a preset, this site deletes the row.

Each preset holds a number. The number goes up by one when somebody downloads that preset. It is one running total on the preset, not a list of downloads.

Some accounts on this site are administrators. An administrator can change or delete any preset, including yours, whether or not they published it.

This site gives them that power; you do not grant it. It exists so somebody can take down a preset that is abusive or infringing.

An administrator can also disable an account. A disabled account cannot sign in. While it is disabled, this site does not show anything that account published.

A disable lasts a set number of days, or until an administrator lifts it. It deletes nothing. Lifting it shows all of that work again, exactly as it was.

When an administrator deletes a preset, or disables an account, this site holds a record of it. The record holds who acted, what they did, why, and when.

Deleting a preset deletes it. So for a deleted preset that record is all this site still holds: the name it had, and the address it was at.

This site holds those records for as long as the account they concern. The reason for a deletion has to outlive the deletion. Otherwise the only account of what happened is the word of whoever did it.

An administrator cannot delete one of those records by deleting their own account. Their name stays on what they did.

You cannot sign in to a disabled account, so you cannot use the controls in settings. Write to privacy@yargthemes.com to ask about it, or to ask this site to delete it.

Some things on this site remember what you chose, so a page opens where you left it instead of resetting every time. What you looked at recently and where you left a slider are two examples.

Your browser holds all of that, and sends none of it here. It exists so that holding one highway against another survives a click.

Clearing this site’s data in your browser clears it, and there is nothing held here to clear alongside it.

This site uses an outside service to count visits. It is cookieless: it sets no cookie, reads no cookie, and cannot follow you between sites or recognize you between visits.

It reports which page you loaded, which page linked to it, the country you asked from, and the general kind of browser and device.

That service holds the data and gives it back as totals. This site holds no per-person record of it, and nothing in it leads to a name.

Those are the terms, not the supplier. If this site ever counts visits in a way that is not cookieless, this page changes before it does.

This site runs on machines it does not own. The pages, the database and the files you upload are all with one hosting company. Every request you make passes through them, so they see the network address it came from.

This site uses that address for one thing: the limits that stop somebody flooding the site with uploads. Those counters live inside the hosting company for a short time. This site never writes them to its database.

That company also holds the ordinary request logs that any host holds: which page you asked for, when, and the address you asked from. It decides how long it holds them, not this site.

The service you sign in with sees your sign-in, which is no surprise. It also sees more than that. Avatar pictures come from that service’s own machines, so any page here showing an avatar makes your browser ask them for that image. That tells them your address, and that you loaded a page on this site. It does so whether or not you have ever signed in here.

These companies run machines around the world. Being hosted at all means what this site holds crosses borders. Each has a privacy policy of its own, and that governs what it does with what it sees.

This page does not name them, because naming them would make it wrong the day one of them changes. Write to privacy@yargthemes.com and you will be told which companies they are today.

This site holds no password. You sign in through another service, so there is nothing here to have a password for.

Nothing on this site is paid for, so this site holds no payment details.

There is no advertising here, no ad network and no tracking pixel. This site sells nothing it holds, and hands nothing to anybody for marketing.

When this site sends you email, it is about something you did here. It is never a newsletter or a promotion, and never somebody else’s.