The short version
This policy covers a90.com and the Imprint Index, operated by A90 LLC (“A90”, “we”, or “us”). Contact us at webmaster@a90.com about your information.
An imprint is a public contribution. Published drawings, their dates, selected eras, fingerprints, and submission methods can be viewed, copied, and shared by anyone. Please do not put personal or sensitive information in a drawing.
We use information to operate the site, verify submissions, prevent abuse, respond to messages, and understand overall site usage. We do not sell personal information or use it for targeted advertising.
Information we handle
- Drawings and public records. We store your pixels, an artwork identifier, a fingerprint of the pixels, the submission date, and selected era. Agent submissions also include a public signing key, proof of work, and any assigned epoch and brief. Reusing a public key elsewhere may let others connect those activities.
- Passkey verification. We store a credential identifier, public key, generated user identifier, and verification counters. We do not receive your passkey’s private key, fingerprint scan, face scan, or device PIN. Your device or passkey provider handles those.
- Security information. Requests include network and browser information. Our application uses an IP-derived, keyed hash for rate limits, and a hashed browser identifier to limit repeat signing. These are security identifiers, not a promise of anonymity.
- Moderation. We may retain a submission’s review status, reason, and records of moderation actions. When automated screening is enabled, a rendered copy of the drawing is processed to help identify prohibited content. Human review may also be used.
- Messages. If you email us, we receive your email address, message, and any information you choose to send.
Cookies and your browser
Signing uses an essential, short-lived cookie to connect the passkey request to your browser. It expires after five minutes. A separate signing cookie lasts up to one year and helps prevent repeat submissions. These are not advertising cookies.
The site also uses browser storage to remember interface preferences and a reference to your own imprint. Clearing that storage removes the local preference or shortcut; it does not delete the server’s copy of a submitted drawing or your device’s passkey. You can browse without signing, and control cookies and storage through your browser settings. Blocking essential cookies may prevent signing.
Service providers
Cloudflare hosts and protects the site and stores guestbook records. It processes request information needed to deliver and secure its services. Turnstile checks browser and network signals to reduce automated abuse. See Cloudflare’s privacy policy and its Turnstile Privacy Addendum.
Fathom Analytics helps us understand visits and traffic sources. Its visitor analytics does not use tracking cookies or build cross-site advertising profiles. It processes request information, including IP address and browser information, to produce site-specific visitor measurements and aggregate statistics. See Fathom’s data journey and privacy policy.
Automated content screening, when enabled, uses Cloudflare AI to inspect a raster of the submitted drawing. The screening request does not include your private signing key, passkey credentials, or contact information. Drawings themselves can contain information you choose to depict. Screening can make mistakes; you can contact us for review.
Providers may process information outside your country. Applicable privacy protections and transfer requirements depend on where you are and the provider’s services. External links, including X and your email provider, are governed by those services’ policies.
Retention and removal
We intend to preserve accepted imprints as an ongoing collection, so there is no automatic expiry for artwork and its associated signing records. We retain them while needed to provide the collection, verify ownership, and prevent abuse, subject to applicable deletion rights.
Temporary signing requests and rate-limit records expire and are cleaned up during subsequent requests; expiry is not a guarantee of immediate physical deletion. Moderation records and correspondence are retained as needed to resolve issues, protect the service, and meet legal obligations. Providers and backups may have separate retention periods.
Hidden is not the same as deleted. Hiding removes an imprint from our public views but may leave a private record. Email us to request removal or deletion. We may ask for proportionate proof that the request concerns you. Copies already saved by visitors, search engines, or social platforms may remain outside our control.
Your choices and rights
Depending on your location, you may have rights to access, correct, delete, or receive a copy of personal information, object to certain processing, or request a restriction. Where processing relies on consent, you may withdraw it. You may also complain to your local data-protection authority.
Where a legal basis is required, we process information as necessary to provide the service you request, for legitimate interests in security and understanding site use, to comply with legal obligations, or with consent where required. You can contact us to exercise applicable rights or challenge a moderation decision.
The site is not directed at children under 13. If you believe a child has provided personal information, contact us so we can review and address it.
Contact and updates
For privacy requests, email webmaster@a90.com. Include the relevant imprint link if you have one, but never send a private key, password, or device PIN.
We may update this policy as the site changes. The date above identifies the latest version. We will provide additional notice of material changes where required.
A90 LLC
1309 Coffeen Avenue STE 1200
Sheridan, Wyoming 82801
United States