🦊 Kylan the Dragon

Privacy Policy

Last updated: December 22, 2025

Data Collection and Storage

This website collects minimal data from visitors to provide basic functionality and security. We are committed to protecting your privacy and being transparent about what data we collect.

Data Stored in Our Database

1. View Tracking (Hashed IP Addresses)

When you view content on this website, we track unique views to provide accurate view counts. To protect your privacy, we do not store your actual IP address.

  • What we store: A one-way cryptographic hash of your IP address (SHA256)
  • Why: To count unique views per post without storing identifiable information
  • Privacy: The hash cannot be reversed to retrieve your original IP address
  • Data stored: Post ID, hashed IP address, and timestamp of view

Important: Your actual IP address is never stored in our database. The hash is a one-way function - it is mathematically impossible to retrieve your IP address from the stored hash.

2. Age Verification Sessions

If you access age-restricted (18+) content, we store a record of your age verification status.

  • What we store: Your PHP session ID, verification status (verified/not verified), and verification timestamp
  • Why: To remember your age verification status during your visit
  • Retention: Session data is automatically cleared when your session expires (typically when you close your browser)

Note: The session ID is a random identifier generated by PHP and does not contain any personal information.

3. Server-Side Session Data

We use PHP sessions to maintain your preferences during your visit. This data is stored on the server, not in the database.

  • What we store: Age verification status, CSRF tokens (for security), session creation time
  • Why: To maintain your preferences and protect against security attacks
  • Retention: Sessions expire after 1 hour of inactivity or when you close your browser

What We Do NOT Collect

  • Your actual IP address (only a one-way hash is stored)
  • Personal information (name, email, address, etc.)
  • Browsing history from other websites
  • Location data
  • Device information
  • Cookies for tracking or advertising

Data Security

We implement security measures to protect your data:

  • IP addresses are hashed using SHA256 with a secret salt before storage
  • Sessions use secure, HTTP-only cookies
  • CSRF protection to prevent unauthorized actions
  • Database access is restricted to the web server

Data Retention

  • View tracking data: Stored indefinitely to maintain accurate view counts
  • Age verification records: Stored until session expiration (typically when browser is closed)
  • Session data: Automatically deleted after 1 hour of inactivity or when browser is closed

Third-Party Services

This website does not use third-party analytics, advertising, or tracking services. All data collection is done directly by this website for its own functionality.

Your Rights

Since we do not collect personally identifiable information, there is no personal data to access, modify, or delete. However, if you have concerns about the data we collect, please contact the website administrator.

Changes to This Policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

Contact

If you have questions about this privacy policy or our data practices, please contact the website administrator.