Privacy
What Zany Face keeps
Short version: no adverts, no analytics, no tracking scripts, no selling anything to anyone. You can post without an account, and the site only keeps what it needs to work.
If you just read
Nothing is stored about you beyond a standard web server log on the hosting side, and a single session cookie if you sign in. No third-party scripts run here, so nobody else gets to watch you.
If you post or reply
- What you typed: the title, the text, the category, any nickname you chose, and any picture link.
- When you posted it, and whether a moderator has since approved, edited or removed it.
- A one-way hash of your IP address, used only to spot spam and stop floods. The hash uses a secret salt and cannot be turned back into your address; raw IP addresses are never stored.
- An email address, but only if you choose to give one when posting as a guest. It is used to send your private tracking link and one note when a moderator approves or rejects the post, and the crew can see it while the post is waiting in case they need to ask you something. Then it is deleted — kept only while the post is undecided, never added to a list, never used for newsletters.
If you have an account
- Your username and email address, and a password hash — never the password itself.
- Profile bits you fill in: bio, tagline, colour, badge, and the profile picture. Pictures are cropped and shrunk to 256×256 JPEG when they arrive, which throws away anything else the original file carried.
- A confirmation or password-reset token while one is outstanding — stored hashed, and it expires. Your last sign-in time, your ZanyCoins balance and anything you have bought.
- Whether you want emails about staff actions on your account. That switch is in your profile editor and the default is on.
Cookies
One session cookie, set when you sign in, so the site knows it is still you. There are no advertising cookies, no analytics cookies, and nothing to consent to beyond that.
Pictures in posts
Those are links, not uploads. When a post with a picture is opened, your browser fetches that file from whichever site is hosting it — so that site, not this one, sees your visit. That is the trade-off for not storing other people's images.
The site sends mail only when it has a reason: confirming a new account, resetting a password,
telling you a moderator has done something to your account, sending a guest the private link for
their post and what a moderator decided about it, and alerting the crew when posts are waiting. Mail comes from no-reply@zanyface.lol. There is no newsletter and no
marketing list.
Getting rid of it
Posts and replies can be removed on request. If you want your account and its profile data gone,
email hello@zanyface.lol from the address on the account and an admin will
delete it by hand — there is no self-service button yet, and pretending otherwise would be worse
than saying so.
Questions about any of this go to the same address, printed plainly here so you can copy it:
hello@zanyface.lol
(open it in your mail app).
If the site ever starts collecting something new, this page will say so before it does.