FuriPage

Privacy

FuriPage is built on one conclusion: data that is never collected is data that can never leak. This policy is short because there is little to talk about.

Last updated: 14 September 2026

What we never collect

• Email addresses — never sent here. Your identity is verified entirely by UWU ID, so we have no address to mail and no way to recover an account over email.
• Passwords — FuriPage has no password system of its own.
• Legal names, birth dates, phone numbers, addresses — never asked for, never stored.
• IP addresses — never stored as text. See the next section.

What we store

Everything below is keyed to the user id (a UUID) UWU ID issues, which carries no personal data in itself:

User id

The reference from UWU ID, used as the key for everything in this system instead of an email or username.

Profiles

Display name, description, avatar and banner images, and whether the page is public.

Characters and fursuits

Name, species, description, maker names and links, and the year a suit was made.

External links

The social accounts you choose to attach (e.g. X, Furaffinity, Telegram) — you add and remove them yourself.

Images

The file, its size, and its checksum. See the EXIF section next.

System logs

Who did what to which content, for after-the-fact review — see the system logs section.

Content reports

The matters you report and the explanation you type.

EXIF and data inside image files

Every uploaded image is re-encoded whole before it is stored, which strips everything embedded in the file: GPS coordinates, camera model, capture date and serial numbers included.

Photos taken on a phone often carry the coordinates of your home without you knowing. That is why we always strip them — it is not an option to turn off.

IP addresses

We do not store your IP address, but we do need to blunt abuse and duplicate sign-ups. So we count requests by putting the address through HMAC first, and store only that digest with a counter.

The key used for the digest is a random value, kept outside the database and rotatable. The digest cannot be turned back into an address, and once the key rotates, old digests cannot be linked to new ones either.

Who can see it

• Anything you mark public — visible to everyone, including people who are not signed in, and indexed by search engines.
• Anything you mark private — visible only to you, on the dashboard.
• System logs and reports — shown on no page. Administrators can read them to handle what was reported.

System logs

We keep a log of what was done to whose content (hiding an image, suspending an account, closing a report) for 90 days, then it is deleted automatically. No copy is kept longer than that.

The entries saying who owned a piece of content are cut out of the log the moment that account is permanently deleted. Only the action itself remains — no name, no user id.

How long things are kept, and when they go

Ordinary content

As long as you want it. Delete it yourself any time from the dashboard.

A deleted account

Hidden the moment we are told, and permanently deleted within 30 days of UWU ID notifying us.

The change-of-mind window

For the first 30 days after deletion, everything is still intact. Restore the account at UWU ID and it all comes back as it was.

A released handle

Held for 90 days before anyone else can claim it, so nobody can step into it immediately — except the handle of a permanently deleted account, which is reserved forever.

System logs

90 days.

Deleting your account

Account deletion happens only on the UWU ID account page, because one account serves every service connected to UWU ID. When you delete it, we know within minutes and the process above starts immediately.

Your rights

You can edit and delete everything you put in yourself, from the dashboard, without asking anyone. What remains is deleting the whole account, which happens at UWU ID as described above.

If you want anything reviewed or corrected beyond that, contact the administrators through the channels on the Terms of Service page.