Privacy

What we store

• Account information: a permanent ID, username, display name (initially your GitHub name), avatar URL, the X and site URLs you enter, and the time the account was created
• Login methods: your GitHub ID and login name, your Google ID (sub) and name, the avatar URL of each, the time each was added, and the time each was last used. We don’t ask for your email address
• Passkeys: the public key, credential ID, usage count, transports, the name you gave it, the time it was created, and the time it was last used. We never have your private key or any face or fingerprint data
• The hash of your recovery code. We don’t keep the code itself
• Usernames you changed from, so that nobody else can take them. They stop being used after 90 days
• Likes and bookmarks, including the time they were made
• The ld_session cookie, which keeps you logged in. Its value is random, and the database holds only its hash, the time you logged in, and the day it was created and last used. It expires after 30 days
• The ld_github_flow and ld_google_flow cookies (each name ends in a number, and there are at most 3 at once), and the ld_signup and ld_passkey_flow cookies, used only during login. They expire within 10 minutes. The in-progress state is also kept in the database and is removed once used
• The ld_lang cookie, created only when you choose a language with the language switch. It stays in your browser and is not stored on our servers. It expires after 1 year
• The prompt format you choose in “Remix”. It stays in your browser and is not stored on our servers
• Daily view and copy counts for each design, without any record of who they came from
• Works you post: the code, the regenerated thumbnail, title, type, how it was made, status, and review results and reasons. If a work is taken down, its files stay in our records
• Counts for rate limits: how many times each person saved today. New accounts are counted by a key made by hashing the IP address with a secret and the date (it can’t be turned back into the IP, and it changes every day). These are deleted after 2 days

What we do not store

• IP addresses and user agents (browser information)
• Email addresses
• GitHub tokens (discarded after being used for login)
• The source code of people who use the designs

IP addresses are used only on the spot, for rate limiting.

What we send elsewhere

Google Analytics (GA4)

Recipient

Google LLC

Information sent

The URL of pages you view (without search terms), button actions (share, copy, bookmark, selecting a design, opening “Remix” and copying its prompt, and whether you had typed anything and which prompt format was selected at that point) with the design’s ID, activity within the page such as scrolling, the referrer, device and browser type, screen size, approximate region, and a cookie identifier (such as _ga). Because of how networks work, your IP address and user agent also reach Google. Login information and the text you type into “Remix” are not sent

Purpose

To learn which pages are viewed and how often, and to improve the site

Advertising features

Google signals and ad personalization are turned off

How Google handles data

How Google uses information from sites that use its services

How to opt out

Google Analytics Opt-out Add-on

Cloudflare

We use Cloudflare to deliver the site and store data. Because of how networks work, your IP address and user agent reach Cloudflare.

GitHub

You can log in with GitHub. Avatars of people logged in with GitHub are loaded from GitHub.

Sign in with Google

You can sign in with Google. Avatars of people signed in with Google are loaded from Google. When you go to Google’s login screen, we pass only what the redirect needs.

Sharing with third parties

Except as described here, we do not give the information we collect to third parties, unless required by law.

Access, correction, and deletion

You can correct your display name and other details, or delete your account, on your account page. Deleting your account removes your account, login methods, sessions, likes, and bookmarks, and takes your designs down from Ludion. For any other request to access, correct, or delete your information, contact:

ludion-support@googlegroups.com

@Lattice_Node on X

Changes to this page

We will announce any changes on this page.