Privacy

Pictures and job records

The curated tabard is free. No purchase or account is required.

Choosing and previewing a picture happens on your device. Submitting sends the prepared picture to the forge. A custom job also sends your design after we verify the Sparks hold its Arcade confirmation placed.

We privately process the source, design or reference, result, and the records needed to run and recover the job: identifiers, settings, times, status and original requests. For a custom job a Sparks hold names the player and the item they confirmed. We receive no card details. With your permission, the Arcade tells us your Sparks balance so this site can show it to you; we don’t store it.

We do not publish your pictures in a gallery, sell them or use them to train models. Submit only pictures you have permission to edit; do not send identity documents, secrets or other people’s private information.

To limit abuse, we derive short-lived network identifiers from the connecting address, grouping nearby addresses where needed. Counters and request fingerprints contain no picture or raw network address. Separate operational logs may contain request information.

Browser storage and recovery

Necessary secure cookies protect private jobs. The free browser guest pass lasts seven days per issue; the separate paid job session lasts one hour. Reading a page does not renew them. A job address alone grants no access.

Return in the same browser to recover a free job. Deleting its guest cookie, using private browsing or changing browsers or devices loses that anonymous access; it cannot be restored through an account.

The browser keeps local previews and bounded records of original requests so an interrupted request can be checked. Free recovery records contain no picture or sign-in credentials.

Custom keeps one local two-picture draft, at most 16 MiB, for one hour. The pictures expire together. A closed browser cannot run deletion, so expired bytes may remain until the page is opened again or site data is cleared. The draft includes its request intent and any player binding, not payment details or credentials.

Minimal unresolved checkout references are separate from the pictures. Each remains until its own checkout deadline. Sign-in records last at most 12 hours. An expired or cleared draft does not cancel a purchase or give back a hold.

Clearing site data loses browser recovery; it does not delete a server job. A download is an independent copy. Starting Download does not prove that your browser saved it, and deleting a job cannot remove a saved copy.

Forge pages load their own assets and the hosting provider’s visit-measurement script, with no third-party fonts or advertising trackers.

Retention and deletion

Ending private access requests asynchronous cleanup; it does not prove every stored copy is deleted. Unresolved operations can hold cleanup. Downloads and copies saved elsewhere are outside the forge’s control.

Cleanup waits for active work and storage acknowledgements. Unconfirmed execution or saving can hold deletion for investigation. Records needed for an incident, security, law or a dispute can remain until that purpose ends.

This forge is not a permanent picture library. Copies downloaded or saved elsewhere are controlled by you or that service, not by a forge deletion. Contact support about a deletion that needs investigation; do not send the picture again.

Finished free result and comparison

The finished free result and its comparison picture stay available for 24 hours after completion, unless you delete them or finish sooner. Download a wanted result before access expires.

Custom job and result

The finished custom result and its comparison picture stay available for 24 hours after completion, unless you delete them or finish sooner. Download a wanted result before access expires.

Sparks hold record

For each custom tabard you confirm we keep the hold: its reference, the item, the Sparks it covers, its state and its times. We keep it to show where a tabard’s Sparks stand, to settle the hold with the Arcade and to answer support questions about it. It is a financial record like the Arcade’s own, with no scheduled deletion time, and it holds no picture, file name, network address or sign-in detail.

Waiting jobs and uploads

Free and custom jobs have a 24-hour waiting deadline. Unused prepared inputs normally last one hour; an unfinished upload has 15 minutes to arrive. A completed job’s comparison picture shares the result’s 24-hour window.

Recovery and abuse records

Generation request receipts normally last one hour. Network counters expire within 24 hours and preparation request fingerprints within one hour. Unresolved operations may retain the records needed to establish their outcome.

Operational records

Hosting and compute providers keep operational and security logs under their own retention policies. We promise no fixed deletion time for those logs.

Providers and processing grounds

Our hosting provider handles page delivery, private storage, job records, security and visit statistics. We run the image editor on rented compute infrastructure. These providers process data to deliver their services, not for a public gallery or consumer chat service.

Processing may happen outside Canada. We promise no country-specific storage. We process data to provide your requested edit, protect the service, investigate faults and understand aggregate traffic. Legal obligations may require retention or disclosure. Where consent is required, contact us to withdraw it for future processing.

We share information only as needed with service providers, to comply with law or to protect people and the service. We do not sell personal information or use advertising trackers. Contact support for current provider details.

Visit statistics

Our hosting provider counts page views and visits and measures page speed. We use these statistics to understand traffic and keep the site responsive, not for advertising or profiling.

Measurements include the page address without its query, referring site, country, device type, browser, operating system and loading times. The provider says it uses no cookies or browser storage for these measurements, does not fingerprint visitors and does not follow them across websites.

A small script sends measurements to a provider-run reporting address on this site when a page loads, when you move between forge pages and when you leave. Reports cover the previous six months. Any new analytics or third-party service will be disclosed here before it is enabled.

Legal basis

Legitimate interest in understanding traffic and keeping the site fast.

Your choices and privacy requests

Use Delete while your browser still has access. For access, correction, deletion, objection, restriction, portability or a complaint, contact support with the job reference, not another picture. We may need to verify your connection to the job and keep records required by law or another valid purpose. Rights vary by location; you may complain to your privacy authority.

Your Arcade account and purchases are managed there. Contact us about this forge’s private jobs and abuse-control records. The service is for people aged 13 or older, with a parent or guardian’s permission where local law requires it.

Operator

Secret Castle Games Inc. (British Columbia, Canada)

Privacy, support and abuse reports

support@secretcastlegames.com

• support@secretcastlegames.com

The owner is also reachable at @mikubeam on X. Use support for privacy, legal, purchase or abuse reports.