4AM Textures is a free CC0 texture library. We collect as little personal data as we can while still running the site, and we never sell it. This page explains exactly what we store, why, and how to get rid of it.

1. Information we collect

If you browse the site without an account, we store:

• Your IP address, temporarily and in memory only, to enforce rate limits and prevent abuse. It is not written to our database.
• A one-way hashed identifier for download counts. Your IP address is combined with a secret key and hashed, so we can count unique downloads without storing who you are. The original address cannot be recovered from it.

If you create a contributor account, we also store:

• Your username and account ID.
• Your email address, used for account confirmation and password resets.
• Your password, stored only as a salted hash. We never store or have access to the password itself.
• Your profile picture and biography, if you add them. Both are optional and can be changed or removed at any time.
• The date your account was created.
• The invite code used to register, and who issued it.

If you upload content, we store:

• The files themselves, plus the title, description, and tags you provide.
• The upload timestamp and download count.

2. How we use your information

• To display textures, bundles, and contributor profiles.
• To let you log in and manage your own uploads.
• To send account confirmation and password reset emails.
• To count downloads and rank popular tags and contributors.
• To prevent spam, abuse, and automated scraping.

We do not sell, rent, or share your data with third parties for advertising or marketing, and we do not run ads.

3. Cookies and local storage

We use cookies only for:

• Keeping you logged in (a session cookie).
• Protecting forms against cross-site request forgery.

Your browser preferences, such as your chosen sort order, grid or list view, and results per page, are kept in your browser's local storage. They never reach our server. You can clear them at any time through your browser settings.

We use no tracking or analytics cookies.

4. Third party services

Running the site requires a small number of external providers. They only receive what they need to do their job:

• DigitalOcean hosts our server, database, and uploaded files (via DigitalOcean Spaces and its CDN). Uploaded textures and profile pictures are served from their content delivery network, which receives the IP address of anyone downloading a file.
• Resend delivers our account confirmation and password reset emails. It receives your email address and the contents of those messages, and nothing else.

We do not use analytics providers, advertising networks, or social media trackers.

5. Data retention and deletion

• Uploaded textures and profiles remain on the site until removed by the uploader or an administrator.
• You can delete your account at any time from your account settings. This permanently deletes your profile, and all of your uploaded textures and bundles, including the files themselves.
• Download records contain only a hashed identifier and a timestamp, and are pruned periodically.
• One exception: if an account is banned for breaking our Terms of Service, we keep the email address on a blocklist after the account is deleted, so the ban cannot be trivially evaded. No other data from the account is kept.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to how we use it. Most of this is available directly in your account settings; for anything else, contact us using the details below and we will respond as soon as we reasonably can.

7. Security

• Passwords are stored only as salted hashes, never in readable form.
• The whole site is served over HTTPS.
• Administrative tools are restricted to admin accounts, and uploads are checked to confirm they really are the file type they claim to be.

No online service can promise perfect security, but we take reasonable steps to protect your data.

8. Children

Accounts are not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, please contact us and we will remove it.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date above always reflects the most recent revision, and significant changes will be announced on the site.

10. Contact

For privacy questions or requests, contact Sabriel@kira-llc.com.