What we collect, and what we do not

When you create an account you provide an email address, a name and a password. The password is stored as a scrypt hash: we never keep the plaintext and cannot recover it. We also store your language preference, your permission settings, and when the account was created and updated.

There are no analytics scripts, no advertising pixels, no cross-site tracking and no fingerprinting. We do not merge you with other data sources and we do not send you marketing.

This site sets exactly one cookie: the session cookie (deepriver_session). It is HttpOnly and SameSite=Lax, Secure in production, and used only to recognise your signed-in state — never for advertising or tracking. Theme and language preferences live in your browser's localStorage and are not sent to the server.

Account data is held in Upstash Redis when those environment variables are configured. Without them it uses the server process's memory, which is cleared on restart and not shared between instances. The site is hosted on Vercel.

For three things only: signing you in, remembering your preferences and permission settings, and showing them back to you on the account page. Not for advertising, not for marketing, never sold or shared with third parties.

The contact form relays email through formsubmit.co, and generating a social share image may ask Google Fonts for a CJK font subset from the server. Beyond that, your account data does not leave the storage described above.

Account data is kept until you delete the account. You can do that from the account page by entering your password; it removes the account and every permission setting at once and cannot be undone.

You can view and change your name and permission settings at any time, or delete the whole account. For an export or any other request, reach us through the contact page.

This site is not directed at children under 14, and we do not knowingly collect their personal information.

Updates are published on this page with a new effective date. If the way we collect account data changes materially, we will say so plainly on the account page.