Privacy Policy

Last updated: 2026-05-11

We store as little about you as possible. No analytics tracking, no advertising cookies, no selling of data to third parties. Below is the exact list of what we keep and why.

What we store

• Handle — your public username. Required.
• Email — optional. Only kept if you provide one, and only used if we later add password reset or notifications.
• Password — never stored in plain text. We store a one-way bcrypt hash that can verify a login but cannot be reversed into your password.
• Your submissions — sims you post, descriptions, comments, votes, follows, favorites. Tied to your handle.
• Account creation time — used to enforce the rule that accounts must be at least 7 days old before creating a new community.

What we don't store

• No analytics, no user-behavior tracking, no advertising data.
• IP addresses are read transiently to rate-limit abusive traffic but are not persisted alongside account records.
• We don't share or sell anything we have to third parties.

Cookies

We use only strictly-necessary cookies, which under EU/UK ePrivacy rules don't require a consent banner:

• A session cookie issued by our auth library (Auth.js / next-auth) to keep you logged in.
• Cookies set by Cloudflare Turnstile during signup to verify you're not a bot. These cookies are set on Cloudflare's domain, not ours.

Third parties

The site is hosted on Fly.io. The signup challenge is provided by Cloudflare Turnstile. Neither receives information about which posts you view or which sims you run. Both have their own privacy policies.

Your rights

Whether or not you're in the EU, you can:

• Ask us what data we have about you (it's the list above).
• Correct your handle or email.
• Delete your account, which removes your user row and cascades to your posts, comments, votes, follows, and favorites.

Email contact@simloops.com and we'll handle it.

Changes

We'll update the date at the top if we change anything material here.