Plain-language notice
Privacy
UV's Compendium is a small, non-commercial fan site. This page describes what it stores and why. It is a factual description of how the site works, not a legal contract.
Reading the site
The calculators, guides, and reference documents work without an account. Browsing them does not set any cookies. If you choose the light or dark theme, that choice is saved in your browser's local storage on your own device. The web host keeps ordinary server logs (such as IP addresses and requested pages) for security and operation.
Member accounts
When you create an account, the site stores:
- Username — public; shown on your profile and your guides.
- Email address — private; never shown publicly. It is used to recognise your account, to send password-reset links, and for occasional account notices such as approval. It is not used for marketing.
- Password — stored only as a one-way hash; nobody, including administrators, can read it.
- Optional profile details you add: avatar, bio, preferred game, website, Discord name, and characters. These are public once your account is active.
- Guides and images you write or upload, including their earlier revisions, which administrators use to review changes.
- Account records such as join date, last sign-in time, approval status, an optional theme preference, and, if you enable it, an encrypted two-factor authentication secret.
Sign-in sessions
Signing in sets one essential session cookie, which keeps you signed in and protects forms against forged requests. It expires when you sign out, after a period of inactivity, or after a maximum session length. Forms that start a session before sign-in (such as the sign-in and sign-up pages) set the same cookie.
Anti-abuse measures
The sign-up and password-reset forms use Cloudflare Turnstile to tell people from bots. Turnstile is loaded from Cloudflare only on those pages, and Cloudflare processes information about your browser and connection under its own privacy policy. To limit repeated attempts, the site counts recent sign-in and sign-up attempts using keyed, one-way hashes of IP addresses and account identifiers; these counters expire within a day.
Uploaded images
Uploaded avatars and guide images are re-processed on the server: they are resized, compressed, and stripped of embedded metadata such as camera details and GPS location. Avatars of active members and images in published guides are public. Images that are not used are removed after a few days.
Embedded videos
Guides may embed YouTube videos using YouTube's privacy-enhanced mode (youtube-nocookie.com). YouTube receives information about your visit when an embedded player loads.
Who can see your information
Site administrators can see account details, including email addresses, to review new accounts, moderate guides, and keep the site safe. Administrative actions are recorded in an internal audit log. Information is not sold or shared with advertisers; the site has no advertising or analytics trackers.
Keeping and deleting information
Your account and profile are kept while the account exists. You can edit or remove optional profile details, characters, and images at any time from your account pages. To delete your account entirely, contact the site administrator; deleting an account removes its profile, characters, and uploaded images. Published guides may remain on the site, credited to a former member, unless you ask for them to be removed as well. Server backups may keep copies for a limited time after deletion.