Privacy Policy

Last updated: July 2026

Tenshin Arts is a nonprofit, and we built this site to collect as little about you as we possibly can. This policy explains, in plain language, exactly what we do and don't collect.

What we collect

Your account. When you sign up, we store only:

• the username you choose (a nickname is fine — it doesn't have to be your real name);
• your password, kept only as a secure one-way hash — we never see or store the actual password;
• a recovery code, also kept only as a hash;
• the date you created the account.

That is the entire account record. No email, no name, no phone number, no address.

Automatic technical information. Like nearly every website, our server keeps short-lived logs to operate and protect the service. These may include your IP address, browser type, and the pages you request. We use them only to keep the service running and secure (for example, to stop abuse) — not to build a profile of you or tie them to your identity.

Cookies. We use a single cookie to keep you signed in. It is first-party (only our site reads it) and holds a signed session token, not personal data. We do not use advertising or cross-site tracking cookies.

Support requests. If you send us a message through our contact form, we store it so we can help. You don't have to identify yourself — but if you choose to leave a phone number or email so we can reply, we keep it only for that request. When the request is resolved, we permanently delete the entire ticket; it is never archived or backed up.

What we don't do

• We don't collect email addresses, real names, or contact information.
• We don't sell, rent, trade, or share your information with data brokers or advertisers.
• We don't show ads or embed advertising trackers.
• We don't track your activity across other websites.

Third-party services

We keep outside services to essentially nothing:

• Hosting: the site runs on servers provided by DigitalOcean (United States), which processes web traffic on our behalf.

We host our own fonts and use no analytics, advertising networks, social-media widgets, content-delivery networks, or third-party trackers. When you visit, your browser communicates only with our server — nothing is requested from Google or anyone else. We took the extra step of self-hosting our typefaces specifically so your IP address is never handed to a font provider. We're serious about this.

How long we keep your data

Your account record stays until you delete it. You can delete your account at any time from your account page — doing so permanently removes your username, password hash, and recovery hash from our database. Server logs are retained only briefly, for operations and security.

Your choices

• Delete your account. Sign in, open your account page, and choose "Delete my account." It's permanent.
• Use a pseudonym. Your username never has to be your real name.

Children's privacy (COPPA)

Tenshin Arts does not knowingly collect personal information from anyone — including children under 13 — because we do not collect personal information at all. Creating an account requires only a username and a password, with no personal details. This service is intended for a general audience and is not directed at children under 13. If you are a parent or guardian and believe your child has somehow provided us with personal information, please contact us and we will address it promptly.

Security

Passwords and recovery codes are stored only as salted, one-way hashes (scrypt) — never in a form we or anyone else can read. The site is served over HTTPS. No system is perfectly secure, but because we hold no personal information, there is very little at risk even in the unlikely event of a breach.

Changes to this policy

If we change how we handle data, we'll update this page and the "last updated" date above. For significant changes, we'll make a reasonable effort to note it on the site.

Contact

Questions about this policy? Reach us through our contact form.