Privacy.

What this site collects

Dreamcoded does not currently run advertising, analytics scripts, or tracking pixels. Search runs in your browser using a static index; your search terms are not sent to a search provider. The public journal and project pages do not use tracking cookies. Community pages use essential cookies for login and form security, as described below.

Hosting

Cloudflare Pages serves this website. Cloudflare may process technical information such as IP addresses and request logs to deliver and protect the site. See Cloudflare’s privacy policy for details of their processing.

Community accounts

When the community is open, an account stores your email address, public username, email verification status and basic account activity. Your email address and account security details are not public. Your username, join date and visible contributions appear on public community pages.

Essential secure cookies keep you signed in and protect forms against forgery. Authentication tokens are not stored in your browser’s local storage. Cloudflare Turnstile helps prevent automated abuse. Amazon Simple Email Service (AWS, Ireland region) sends sign-in and email verification messages. Sign-in links expire after 15 minutes and work once; we store only hashes of those tokens. We do not store passwords.

Reports, moderation notes, content removed from public view and limited previous post content are retained for community administration. Expiring hashed network identifiers and rate counters help prevent abuse. Staff can restrict accounts and review reports; ordinary members cannot access those records.

You can request account deletion from your account settings. An administrator removes your account identifiers and replaces your public identity with “Deleted User”, while keeping discussions intact. Content you have written may still contain information you chose to share, so avoid putting private information in posts. Security and moderation records may remain where needed to protect the community.

External links and videos

Links to YouTube, GitHub and other websites take you to services with their own privacy policies. If an article includes an embedded video, it uses YouTube’s privacy-enhanced domain. Loading an embed can still send technical information to YouTube; interacting with it may involve additional data processing.

Updates

I’ll update this page if I add a service that changes how visitor data is handled.

Community avatars use Gravatar. Avatar URLs contain a SHA-256 hash of your verified email address, which is a public identifier and may be matched to an email address someone already knows. Your browser contacts Gravatar to load images, sharing your IP address; we suppress the page referrer. Gravatar manages the avatar associated with your email. Anonymised accounts use a local placeholder.