Privacy Policy

Short version: we collect what it takes to run your page, we don't sell it, and we don't follow you around the web.

What we keep

• Your account: username, email address and a scrambled (hashed) version of your password. We never see the password itself.
• Your page: everything you add to it, including uploads, your design, custom code and guestbook entries.
• Messages: your chats, so they show up on your devices. Only the people in a conversation can read it or open its pictures. If someone reports a message, our moderators can see that message to review the report.
• Sign-ins: the IP address and browser of each signed-in device, so you can see and end sessions in Settings.

Page views

We count visits without tracking visitors. Each view gets a code made from the IP address and browser, scrambled with a key that changes every day, so the same person can't be followed from one day to the next. We don't store raw IP addresses for this, and we only keep the website name a visitor came from.

Photos

When you upload a picture, we strip hidden details like the camera model and GPS location before anyone sees it.

Cookies

We use one cookie to keep you signed in. No advertising or tracking cookies.

Other services a page can use

Some things on a page load from other companies when someone visits it: fonts come from Google Fonts, video and music embeds come from the site they're from (like YouTube or Spotify), and owners can show images hosted elsewhere. Those services can see the visitor's IP address. Custom HTML blocks run on a separate website, sealed off from your account and from cutecore.lol.

Your choices

You can make your page unlisted or private, hide it from search engines, and block or mute people.

Download your data: Settings → Advanced gives you one file with everything we keep about you: your account, page and design, custom code, skins, music, galleries, guestbook, friends, the messages you sent, and a list of your uploads.

Delete your account: your page goes offline and you're signed out everywhere straight away, and your email address and password are erased. We keep the rest for 30 days (so reports about the account can still be looked into), then erase your account, your page, your uploads, your messages and everything else tied to it. Reports other people filed stay on record without your details.