Privacy Policy

Short version: we collect what it takes to run your pages, we don't sell it, and we don't follow you around the web.

What we keep

• Your account: your username, a scrambled (hashed) version of your password, and who invited you. We don't ask for an email address. (Accounts made before invites may still have an old email on file; it isn't used or shown anywhere.)
• Your pages: everything you add to them, including uploads (stored in our database), your design, custom code and guestbook entries.
• Fun stats: how long you spend on the site and in each part of the editor, and what kinds of things you delete. These show up in the Stats section of your page and, for editor time, on the homepage leaderboard.
• Sign-ins: the IP address and browser of each signed-in device, so you can see and end sessions in Settings.

Page views and likes

We count visits with a code made from the visitor's IP address and browser, scrambled with a key that changes every day. We don't store raw IP addresses for this, and we only keep the website name a visitor came from.

If you're signed in when you visit someone's page, we remember that your account visited (at most once a day). Owners of cutecore, and members they've given the option to, can see a list of which signed-in accounts visited their pages the most. Sign out if you'd rather browse anonymously.

Likes from people without an account are remembered with a similar scrambled code (this one doesn't change daily, so the same browser can't like a page over and over). Guestbook messages from people without an account are posted as "Anonymous".

Photos and fonts

When you upload a picture, we strip hidden details like the camera model and GPS location before anyone sees it. Fonts you upload are only used on your own pages.

Cookies and storage

We use one cookie to keep you signed in, and your browser remembers your chosen site theme. No advertising or tracking cookies.

Other services a page can use

Some things on a page load from other companies when someone visits it: fonts come from Google Fonts, video and music embeds come from the site they're from (like YouTube or Spotify), and owners can show images hosted elsewhere (including inside custom HTML). Those services can see the visitor's IP address. Custom HTML is cleaned before it's shown, so it can't run scripts.

Owners

cutecore is run by a small group of Owners. To keep the site safe they can see every page, change view and like counts, give badges, reset pages and passwords, and ban accounts. Everything they do is logged.

Your choices

You can make a page unlisted or private, hide it from search engines, and hide your @handle.

Download your data: Settings → Advanced gives you one file with everything we keep about you: your account, pages and design, custom code, skins, music, galleries, guestbook, stats, likes you gave, and a list of your uploads.

Delete your account: your pages go offline and you're signed out everywhere straight away, and your password is erased. We keep the rest for 30 days (so reports about the account can still be looked into), then erase your account, your pages, your uploads and everything else tied to it. Reports other people filed stay on record without your details.