Privacy

What is collected when you sign in

Signing in is optional. You can browse and read every public chart without an account.

Sign-in goes through GitHub or Google, whichever the site is currently offering. In both cases we store four things:

• the provider’s own account id, which is what identifies you here
• a short name to show — your username on GitHub, or your display name on Google, which has no username
• your display name
• the URL of your avatar image

Your email address is not requested and not stored. We ask GitHub for the read:user scope and Google foropenid profile; neither includes an email address, so we never receive one. The access token is used once, during sign-in, to read that profile, and is then discarded — it is never written to the database.

Signing in with the other provider creates a separate account. Because no email address is collected, there is nothing to match two sign-ins by, so we cannot tell that a GitHub account and a Google account belong to the same person — and we would rather not hold the data that would let us. The cost is real: charts you made under one provider are not visible under the other.

What is collected when you use the site

• Charts you create — the title, description, tiers, items, tags and topics. All of it is public: anyone can read it, including search engines.
• Likes — recorded per person, so a chart can be liked once by each account and un-liked again.
• View counts — a per-chart total. It is a number, not a log: who viewed what is not recorded.
• Your IP address — used to rate-limit writes, held in memory for the length of the limit window, and written to ordinary server request logs. It is not stored in the database and not associated with your account.

Cookies

There are two, both strictly functional:

• iceberg_session — set when you sign in. It holds a signed token identifying your account, expires after seven days, and isHttpOnly, so scripts on the page cannot read it. Signing out clears it.
• iceberg_oauth_state — set for ten minutes while a sign-in is in progress, to verify that the request coming back from the provider is the one that left. Cleared as soon as sign-in completes.

There are no analytics cookies, no advertising, and no third-party trackers. Nothing on this site loads a script from anyone else, so no third party is in a position to observe your visit.

What is shared

Nothing is sold, and nothing is passed to an analytics or advertising provider, because none is used. Charts are public by design, so treat anything you put in one as published.

The site talks to whichever provider you choose during sign-in, which necessarily tells that provider you signed in here. Avatar images are served from the provider’s own image host, so your browser requests them directly from GitHub or Google when a page shows one.

Retention and your choices

• Signing out clears your session cookie immediately.
• Charts you create stay until they are deleted. Deleting a chart removes it and its likes.
• There is no self-service account deletion yet. Until there is, removing an account and its charts is a manual request — see the note at the top about the missing contact address.

Changes

This page will be replaced with a reviewed version before the site is promoted anywhere. Material changes will be noted here.

See also the terms of service.