🐲 Kylan the Dragon

Privacy Policy

Last updated: January 16, 2026

Data Collection and Storage

This website collects minimal data from visitors to provide basic functionality and security. I am committed to protecting your privacy and being transparent about what data I collect.

Data Stored in My Database

1. View Tracking (Hashed IP Addresses)

When you view content on this website, I track unique views to provide accurate view counts. To protect your privacy, I do not store your actual IP address.

  • What I store: A one-way cryptographic hash of your IP address (SHA256)
  • Why: To count unique views per post without storing identifiable information
  • Privacy: The hash cannot be reversed to retrieve your original IP address
  • Data stored: Post ID, hashed IP address, and timestamp of view

Important: Your actual IP address is never stored in my database. The hash is a one-way function - it is mathematically impossible to retrieve your IP address from the stored hash.

2. Age Verification Sessions

If you access age-restricted (18+) content, I store a record of your age verification status.

  • What I store: Your PHP session ID, verification status (verified/not verified), and verification timestamp
  • Why: To remember your age verification status during your visit
  • Retention: Session data is automatically cleared when your session expires (typically when you close your browser)

Note: The session ID is a random identifier generated by PHP and does not contain any personal information.

3. Server-Side Session Data

I use PHP sessions to maintain your preferences during your visit. This data is stored on the server, not in the database.

  • What I store: Age verification status, CSRF tokens (for security), session creation time
  • Why: To maintain your preferences and protect against security attacks
  • Retention: Sessions expire after 1 hour of inactivity or when you close your browser

What I Do NOT Collect

  • Your actual IP address (only a one-way hash is stored)
  • Personal information (name, email, address, etc.)
  • Browsing history from other websites
  • Location data
  • Device information
  • Cookies for tracking or advertising

Data Security

I implement security measures to protect your data:

  • IP addresses are hashed using SHA256 with a secret salt before storage
  • Sessions use secure, HTTP-only cookies
  • CSRF protection to prevent unauthorized actions
  • Database access is restricted to the web server

Data Retention

  • View tracking data: Stored indefinitely to maintain accurate view counts
  • Age verification records: Stored until session expiration (typically when browser is closed)
  • Session data: Automatically deleted after 1 hour of inactivity or when browser is closed

Third-Party Services

This website does not use third-party analytics, advertising, or tracking services. All data collection is done directly by this website for its own functionality.

Your Rights

Since I do not collect personally identifiable information, there is no personal data to access, modify, or delete. However, if you have concerns about the data I collect, please contact the website administrator.

Changes to This Policy

I may update this privacy policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. I encourage you to review this page periodically.

Contact

If you have questions about this privacy policy or my data practices, please contact the website administrator.