Privacy Information

Last updated April 19, 2024

This page explains exactly what SORA stores about you, how long it's kept, and how to remove it. The short version: we collect as little as possible.

What we store

• Just visiting the website (no login, no applications): only your browser's user agent is stored. It's used purely to detect bots and malicious traffic and is cleared roughly every 3 months.
• Submitting an application: your answers are saved even if the application is rejected. Your IP address — hashed with SHA512 and multiple salts — is stored temporarily to detect spam and is deleted about 5 minutes after submission.
• Creating an account: your username and password are stored (the password is hashed with argon2), along with your registration date and account data like your avatar and its thumbnail. A hashed IP is kept for about 1 hour, plus a count of accounts created — your IP is never directly linked to your account.
• Logging in: a hashed IP is stored for about 1 hour together with a login-attempt counter. Again, it is never linked to your account.

Content you create

Anything you type into the site (descriptions, statuses, forum posts) is saved. Status updates are kept permanently; only your latest profile description is retained. Your outfits, current avatar, and its thumbnail are saved. Uploaded content such as images is stored permanently unless removed for violating the Terms of Service.

Game servers never see your real IP address — connections are proxied, so servers only ever see a local address.

Deleting your data

You can request account deletion on the Account Deletion page. Your account must be offline for one week before it can be deleted — your online timestamp refreshes every time you visit while logged in, so log out first and come back in a week. Deleting your account removes all of your information except content you uploaded (such as images).

Third parties

This site uses Cloudflare and jsdelivr; their respective privacy policies are linked.