Keep your
boundaries.
Plain information about what this release does with your data.
Release notice · 19 October 2026
Public browsing.
The site doesn’t add advertising pixels, behavioural analytics or third-party font requests. Cloudflare and the hosting provider process ordinary request information to deliver and protect the site. This is not an anonymity service.
Your browser.
The adult declaration and safe/cheeky preference are kept in session storage. The private tour stores practice activity in local storage on this device. Studio artwork is generated locally. The account page lets you export or erase tour data. Clearing browser storage also removes it.
Updates and messages.
Contact and updates pages load Cloudflare Turnstile, which processes browser and connection signals to prevent spam. Submitting a form sends the fields you choose to provide to Formspree for delivery and spam prevention. A reply address is needed to respond. Update consent is separate from ordinary contact. Use the contact form to request access, correction, deletion or unsubscribing; we may need to verify your identity for account requests.
Community accounts.
Shared accounts are closed until the existing Full Mast Supabase project is connected and tested. When enabled, Supabase Auth will process your email and password; passwords are handled by the authentication service. Your public alias, bio and posts are public within the community. Email addresses, private reports and notifications must remain private. The notice must be reviewed against the selected project’s region and configuration before opening accounts.
Location.
No coordinates, automatic geolocation or member distance search. Broad regions are opt-in, and aggregates suppress groups smaller than five. Precise nearby features remain a separate future proposal.
Retention and requests.
Tour data remains on your device until erased. Contact messages are kept only as needed to handle the enquiry and maintain necessary records. Shared-account retention and deletion procedures must be finalised before shared sign-up opens. Don’t submit sensitive material through the general form.
External services.
Links to Bluesky open its service. Hosting and form services have their own privacy terms: Cloudflare, Formspree and Supabase.
For a privacy enquiry, use the privacy contact form. Required operator information is provided directly for legitimate requests.