Privacy & Cookies
This page explains what data TileHub (“Service”, “we”) collects, why we collect it, and your choices. We aim to collect the minimum necessary to run a community tile-sharing service.
What we collect
- Service data you provide: uploaded tiles (images), titles, tags, games, descriptions, comments.
- Anonymous account token: a “Secret User ID” stored in a browser cookie so you can manage your uploads and log in across devices.
- Security & operations data: server logs (IP address, user-agent, timestamps, error logs).
- View metrics (for shared links): for
/t/{token}we log referrer host (if provided), timestamp, and may count views per referrer host. - Cookies & local storage: see the Cookies section below.
Why we collect it
- Provide the service (legitimate interests): upload, render, comment, and manage tiles.
- Security & abuse prevention (legitimate interests): rate-limits, CSRF protection, moderation queues, report/strike handling.
- Basic analytics (consent): optional audience measurement via Google Analytics (disabled until you allow it).
Cookies & storage
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
session |
Cookie (necessary) | Framework session for admin/mod tools & CSRF rotation. | Session / per config |
ci_csrf_token |
Cookie (necessary) | CSRF protection for forms and APIs. | Per config |
uid |
Cookie (necessary) | Pseudonymous “Secret User ID” so you can manage uploads without personal data. | Up to 5 years |
tilehub_cookie_prefs |
LocalStorage (preferences) | Your consent choices for optional cookies like analytics. | Until cleared |
Necessary cookies are required to deliver features you request and do not require consent. Optional cookies (e.g., analytics) are disabled until you allow them via the cookie banner.
Google Analytics (optional)
If you allow optional cookies, we may load Google Analytics to understand overall usage (page views, device types). We do not attach personal information to analytics and do not use cross-site advertising features. You can change your choice anytime by clearing site data or using the cookie banner when it appears again.
Data retention
- Uploads, titles, tags, and comments: kept until you delete them or your account is removed.
- Referrer view aggregates: kept while useful for operations (aggregated counts; no per-person profiles).
- Server logs: typically 30–90 days, unless needed for security investigations.
Your choices & rights
- You can delete your tiles and comments at any time from within the site.
- You can export or delete your account by contacting us with your Secret User ID.
- EU/UK visitors may have rights to access, correct, delete, or object to processing; contact us and we’ll help.
International transfers
We are hosted in Canada. If we use third-party processors in other countries, we ensure appropriate safeguards (e.g., contractual terms) consistent with applicable law.
Children
TileHub is not directed to children. Do not use the Service if you are not old enough to consent in your location.
Contact
For privacy questions or data requests (export/delete), email elvyler@tilehub.app and include your Secret User ID.
Changes
We may update this page; material changes will be reflected by the “Last updated” date above.