Privacy Policy

DENSO respects your privacy and collects as little as possible. This policy explains what we hold and why.

What we collect

Email address — to send account and access messages, and occasional messages about the site, which you can stop at any time. Password — only if you set one, and stored only as a salted hash; we never see it. Most accounts have no password at all and sign in by a link we email you. Subscription status — tier, status, and processor reference, to grant access. What you look at — which visions you open, how long you look, and which you save, hide or download, kept against your account so the gallery can put the ones you like first. We do not collect your legal name, and we never ask for it.

Payment data

Card and payment details are handled entirely by our processors (CCBill and/or BTCPay Server). We never receive or store your card number. We store only a processor reference id and your subscription status.

Age checks

Some places require us to verify your age before showing you the paid gallery. We send you to Didit, an age-verification provider. They see your document; we do not. We receive their answer, a reference for it, and nothing else — never your name, your date of birth, or any document number.

Analytics

On this site we use self-hosted analytics: no Google Analytics, no third-party tracker, no advertising cookies, and no device fingerprints. Our entry page at hushnoir.pages.dev uses Cloudflare Web Analytics, which sets no cookies.

For each page view we record the page address, the referring site’s host (not the full address), the time, and a random browser id. That id is a random number kept in one of our own cookies; the cookie is refreshed each visit and expires 30 days after your last one. We use it to count visitors rather than page views, and to remember which pictures you opened on the public grid, so that a free account can begin with visions like the ones you stopped on. When you create an account, that record moves into your account and the cookie is deleted. It is never your name, and we never sell or share it.

Your IP address is not kept in our analytics. We use it only to limit abusive requests, it is stored for that purpose alone, and those records are cleared about a day after they were last needed.

We do not record page views in the paid gallery or our admin pages. We do record them on your account page and in the free gallery. When you begin a purchase we record that with your account id, so we can tell whether the payment went through.

Cookies

Every cookie we set is our own and is sent to nobody else. We set no advertising cookies and no third party sets a cookie here. We use them for seven things:

• Signing in — to keep you signed in, and to remember a device you have approved. Signing in with Google or X also sets a few cookies that last about ten minutes and are deleted as soon as it finishes.
• The age check — to remember that you confirmed your age, and that a check was completed.
• Buying — to remember which offer you chose while you are on the payment page.
• A gift — a discount code from one of our emails, kept for up to 7 days so it is not lost when you sign in. Signing out removes it.
• Language — the language we detected from your browser, or the one you chose. It lasts a year.
• Remembering a vision — when you tap a picture we keep its id for 7 days, so the gallery can open on it if you join.
• Counting visitors — the browser id described above.

The slideshow also remembers its own settings in your browser’s local storage. Nothing there is sent to us. You can block or delete all of it in your browser; if you do, you will not be able to sign in or buy, but you can still read the public pages.

How long we keep it

Your account and what it holds stay until you ask us to delete them. Records kept to stop abusive requests are cleared about a day after they were last needed, and an unfinished checkout is cleared after a month. Our page-view records have no fixed expiry; they hold no name and no IP address.

Emails

If you create a free account you may receive a short sequence of messages. Every one carries an unsubscribe link, and one click stops all future messages of that kind. You will still receive the messages needed to run your account — a sign-in link when you ask for one, and confirmation of anything you buy — because without them you could not get in.

Your choices

You may request deletion of your account and associated data at any time by writing to contact@oneoauth.com. We will honour it, subject to records we must retain for tax or legal reasons.

Sharing

We do not sell your data, and we share it only with the services that run the site: CCBill and BTCPay Server for payment, Didit for age checks (they see your document, we receive only their answer), Resend to deliver our email, and Cloudflare, which carries every request to us. If you sign in with Google or X, that sign-in happens at Google or X.

Contact

Privacy requests: contact@oneoauth.com.