Privacy Policy ~ Iggy's List

This is a small personal site. It is not a company and there is no legal department. What follows is a plain description of what it stores and who can see it. It is written to be accurate rather than reassuring.

The short version

Nothing here is encrypted in a way that hides it from the site owner. Everything you type is stored as ordinary text in a database the owner controls and can read at any time.
Your list is shared with the owner by design. There is a screen that shows every account's list. That is the entire point of the site.
Pictures you mark as shared are also visible to the owner, at full resolution. Sharing is off until you press the button, and you can stop sharing again at any time. This is how pictures get handed over for use in building a site.
Your other files, drawings and account settings are not shown on those screens, but they are still stored in the same database and the owner can read them if they look.
Nothing here is published at a public address. There is no link that lets a stranger see your pictures; everything requires signing in.
There are no adverts, no analytics, no trackers, and nothing is sold or shared with anyone else.

What is stored

Your user name, and a password that is stored only as a PBKDF2-SHA256 hash with a random salt. The password itself is not stored and cannot be read back, by the owner or anyone else.
Your list items and their notes.
Files you save in Notepad and Paint, including the text and the images themselves.
Pictures you upload, kept exactly as you uploaded them, at full resolution and without re-compression. The image data is stored in Cloudflare R2 and the file name and folder are stored in the database.
A backup email, if you choose to add one. It is optional, it is stored as plain text, and nothing is ever emailed to it automatically. It exists only so you have a way to identify yourself if you are locked out.
Recovery codes, stored only as hashes. The codes are shown to you once when generated and cannot be recovered afterwards.
An authenticator secret, if you turn one on. This is stored as plain text, because the server needs it to check your codes. Anyone with database access could use it to generate codes for your account.
A login cookie, which holds your account number and a signature. It is not readable by scripts and is not used for tracking.

Who can see it

The site owner. Cloudflare, which hosts the site and the database, as any hosting provider can. Nobody else. Accounts are separated from each other: one signed-in account cannot read another account's files or list through the site, apart from the owner's shared-list screen described above.

Things that are not true here

This site does not offer end-to-end encryption, zero-knowledge storage, or any guarantee that the owner will not read what you write. If you want to write something genuinely private, do not write it here. That is not a warning about this particular site so much as about any small web app that stores plain text in a database.

Deleting things

Deleting a list item or a file removes the row from the database immediately. There is no trash and no undo, and the Recycle Bin on the desktop is decorative. Backups or database snapshots taken by the host may still contain deleted content for a while.

The emulator and the browser window

The Virtual Machine window runs entirely inside your own browser and sends nothing anywhere. The Internet window loads archived pages from the Internet Archive's Wayback Machine, so requests for those pages go to archive.org and are subject to their terms and privacy policy, not this one.

Children

This is a private site for a small number of people who know each other. It is not aimed at the general public and collects nothing beyond what is listed above.

Changes

If what is stored or who can see it changes, this page changes with it. Last updated 11 August 2026.