Privacy notice

What we store. Your username, email address and avatar URL from the sign-in provider (GitHub or GitLab); the files, folders and simulation states you save; designs you publish; comments and votes; and, for MCP connections, the clients you authorised and hashed tokens.

What we do not store. Passwords (there are none) and provider access tokens beyond the sign-in request.

Where. Metadata lives in a Supabase (PostgreSQL) database; file bodies and thumbnails in Cloudflare R2; caches and sessions in Cloudflare KV. The site runs on Cloudflare Workers.

Who can see what. Your files are private to your account (and to MCP clients you authorise). Published designs are public; comments are visible to signed-in members. Moderators can see hidden comments and account emails for moderation.

Deleting. Delete files from the workbench; delete publications from My published designs; sign out from any page. To delete your account entirely, remove your files and contact the operator via the address on the terms page.

Cookies. One session cookie (30 days, HttpOnly) and a short-lived state cookie during sign-in. Theme preference is kept in your browser's local storage.