Privacy

What is stored

• If you register with an email address: that address, and a hash of your password. The password itself is never stored and I cannot read it.
• If you sign in with Google instead: the account identifier, email address and name Google returns, and the profile picture URL if there is one. I do not receive your Google password and I do not ask Google for anything else.
• A session cookie, so that being signed in survives a page load.
• The age-assertion cookies, av and avc, if you confirm your age. They record that a confirmation happened. They do not record who made it.
• The safe-for-work preference cookie, sfwo, if you set it.
• Your favourites: which images you saved, and when. Nobody else can see them, and nothing on the public site is derived from them — there are no view counts, no "most saved" lists and no recommendations.

That is the whole list. There is no profile, no browsing history, no "recently viewed", and nothing is inferred about you from what you look at.

Your IP address and country

Every request that arrives carries an IP address, because that is how the internet works. This site looks it up against a local copy of a country database, in memory, to decide whether explicit content may lawfully be served to where you are. That is the only thing the lookup is used for.

The address is not stored in the database. The country it resolved to is not stored either. Nothing about the lookup is written down, and no request goes to a third-party geolocation service — the database file sits on the same machine as the site.

What is not here

• No analytics. No Google Analytics, no Plausible, no Matomo, nothing self-hosted.
• No third-party trackers, pixels, or advertising networks.
• No embedded social media, no comment platform, no chat widget, no font CDN — the typefaces are served from this site's own domain.
• No cookie banner, because there is nothing to ask permission for: every cookie here is one the site cannot work without, or one you set yourself by clicking a control that says what it does.

Server logs

The web server writes ordinary access logs — address, time, path, status code, user agent — which is what makes it possible to notice that something is broken or that the site is being scraped. They rotate on roughly a fourteen-day cycle and are not read for any other purpose, not aggregated, and not connected to accounts.

Where it lives

The site and its database run on a single virtual server rented from OVH, in Canada. Nothing is replicated elsewhere, and no part of the data is handed to a processor, a backup service or an analytics provider. I operate it from South Africa, which means data reaches me there when I administer it.

Getting rid of it

Deleting your account from the account page removes the account, its sign-in record, its sessions and its favourites. It is immediate and it cannot be undone. If you would rather ask me to do it, or want to know what is held for your address first, email me and I will answer.

webmaster@ai-models.art

Cookies can be cleared from your browser at any time; doing so signs you out and forgets the age assertion, nothing more.

Changes

If this ever changes — and the change most likely to happen is advertising, which would bring a third party and its cookies with it — this page is updated before the change goes live, not after. The date at the foot of this page is when it was last gone over.