Privacy

Aethermoor is a small, invite-only pre-alpha. This page says exactly what the site stores, why, and how to get rid of it. It describes what the software actually does.

Last updated 3 August 2026.

What is collected

If you have an account: your email address, your display name, a hashed password, and a profile picture if you upload one. If you change your display name, the previous one is kept so older comments can show “formerly…” — you can switch that off in your account settings. Uploaded pictures are re-encoded on the way in, which strips embedded metadata such as camera and location.

If you subscribe to the dev log: your email address, which emails you asked for, and a record of the consent itself — the date, how it was given, the page it came from, the IP address it came from, and the exact wording shown to you at the time. That record exists so the consent can be evidenced rather than merely asserted, and it is used for nothing else.

If you post: your comments and which posts you liked. Comments are stored and shown as plain text.

Sending records: which newsletter went to your address and whether it was delivered, so a send can be audited and not repeated.

What is not collected

There is no analytics, no advertising, and no third-party tracking script on this site. The only cookies are the one that keeps you signed in and one that protects forms against cross-site submission. Neither follows you anywhere.

Who it is shared with

Nothing is sold or rented, ever. Data is handled by the services needed to run the site: an email provider to deliver messages, a hosting and network provider to serve pages, and object storage for uploaded images. Otherwise it stays here.

How long it is kept

An address entered but never confirmed is deleted after thirty days. It was never confirmed, so keeping it indefinitely would be the problem, not deleting it.

Everything else is kept while your account or subscription exists, and goes when you end it.

Ending it

Unsubscribing takes one click from the footer of any dev log email, or from your email preferences. Account emails — sign-in, password resets, invite codes — are separate and keep working.

Deleting your account is self-service from your account page. It removes the account, the picture, the address, the subscription, the consent record and the sending log.

One thing deliberately survives: your comments stay, with your name removed. They are relabelled and unlinked from you, because deleting them outright would tear holes in conversations belonging to people who did not ask for anything — replies answering a question that had suddenly vanished. Nothing in a detached comment points back to you. If you want the text itself gone, delete the comments before deleting the account, or ask.

Your rights

You can ask what is held about you, ask for it to be corrected, or ask for it to be deleted. Most of that is self-service above; for anything else, ask and it will be done. Depending on where you live you may have further rights under laws such as the GDPR or the UK GDPR, and those are honoured regardless of where you are.

Children

This site is not intended for children under 13, and accounts are not knowingly created for them. If one exists, it will be removed on request.

Contact

For anything on this page — a question, a correction, a request to see or delete what is held about you — write to [email protected].

Changes

If this changes in a way that affects what is collected or why, the change will be announced in the dev log rather than made quietly.