Privacy Policy

1. Who is responsible

Isolatedd at isolatedd.xyz is operated by IsolateCard, an individual-operated business based in Kentucky, United States. This policy explains how we handle information when you visit the site, create an account, publish a profile, or contact us. For privacy questions or requests, use our contact form.

2. Information we collect

Account and profile. We collect your username, email address, password in hashed form, account settings, and the profile content you choose to provide, such as a display name, biography, links, images, media, badges, and customization. We keep a record of your acceptance of the Terms.

Use and security. We receive information needed to operate and protect the site, including session activity, browser or device information, approximate country, and network information used for abuse prevention. If you send a support ticket, bug report, or suggestion, we keep the details and reply email you provide. Ticket messages and status updates remain available in the contact portal after you verify your reply email.

Weather widget. If you enable this widget, we save the location label and coordinates you choose for your profile forecast. You can choose an approximate location from your connection or allow your browser to share device location. Device location is requested only when you select that option. Profile visitors are shown your chosen location label and forecast; their location is not requested for this widget.

Invite rewards. If you join through an invite link, we record which account invited you. We check your connection IP at signup and email verification for known VPN or proxy use; flagged connections cannot complete a referred signup. After email verification, we record the qualifying signup, reward progress, and a one-way keyed hash of the verified email address to prevent the same email from counting twice. Invite progress is visible to the inviting account only as aggregate counts; your email address is not shown to them.

Payments. For purchases, gifts, and donations, we keep payment and entitlement records, including Stripe customer and transaction identifiers, amounts, and refund status. Stripe collects and processes payment card details; Isolatedd does not receive your full card number.

3. What other people can see

Your published profile, enabled Discord details, links, uploaded media, visible badges, and profile view total can be seen without signing in. Profiles may appear in the leaderboard, site examples, search results, screenshots, and link previews. Choose what you publish with this in mind. Other sites and people may keep copies after you change or delete your profile. If an Isolatedd featured example still shows content you removed, ask us to remove it.

Your account email, password hash, detailed analytics, and payment records are not displayed on your public profile.

4. Profile views and link analytics

When someone opens a profile, their browser stores a random visitor identifier in local storage and sends it with the profile name and referring page. We hash that identifier separately for each profile, then record the visit date, broad device type, referring site hostname, and approximate country. We use this to count a browser once per profile per UTC day and to show the profile owner aggregated analytics. A link click can also be recorded for the owner's analytics. View counts and leaderboards are public; the detailed analytics are available to the account owner.

Individual profile-view records and all-time totals remain while the associated account exists. The dashboard shows up to 7 days of detailed analytics for Free accounts and 14 days for Premium accounts. Link-click records older than 14 days are removed when the analytics dashboard is accessed. Clearing your browser's local storage resets its visitor identifier; it does not remove views already recorded.

5. How we use information

We use information to create and secure accounts, verify email addresses, display profiles and connected features, count views, provide analytics, deliver purchases, handle payments and refunds, respond to requests, enforce our Terms of Service, prevent abuse, and maintain or improve the service. We do not sell your personal information.

6. Cookies and local storage

We use a session cookie to keep you signed in. When you register, sign in, or use a signed-in dashboard, we also set a secure, random browser marker cookie for up to one year. We store only its hash alongside accounts created or used with that browser to identify potential duplicate accounts and prevent abuse. Staff may see that accounts share a browser marker, but a shared browser does not prove they belong to the same person. Short-lived cookies support the Discord connection process, and a language cookie remembers your selected language. Local storage holds the separate random profile-view identifier and may remember interface preferences, such as dismissed notices or collapsed sections. Some editor drafts are held in session storage. You can clear cookies and browser storage in your browser, but doing so may sign you out, reset preferences, or affect view counting.

7. Services we use

Cloudflare hosts the site, database, and uploaded files, processes site traffic, sends account verification, password recovery, and support ticket emails, and routes messages sent to our support and account mailboxes. Stripe handles checkout and payment processing. For referred signups, our server sends the connection IP address to Proxycheck.io to detect known VPNs and proxies. If you connect Discord, we receive your Discord user ID, display name, avatar, and available decoration or nameplate details so you can use those features on your profile; you can disconnect it in Settings. If you enable Weather, our server sends the selected coordinates to MET Norway for forecast data; visitors do not send their location to MET Norway through the widget. Weather data is provided by MET Norway under CC BY 4.0. We convert temperatures to Fahrenheit when selected and present forecast symbols as short descriptions. The site also loads fonts from Google Fonts. Those providers may process technical information when their services are used, under their own privacy terms. Links you add to a profile may take visitors to services with separate privacy practices.

8. How long we keep information

We keep account and profile information while your account is active. Pending email verification and password reset codes expire after 15 minutes. When you delete your account in Settings, we remove its account, profile, sessions, and profile-view records from the active database. If an invited user deletes their account, we remove the link to that account from the inviter's reward record but retain the keyed email hash to prevent the same email from earning another reward. If an inviting account is deleted, its invite progress and reward records are removed. Some information, including payment, support, security, or backup records, may remain where needed for legal obligations, fraud prevention, disputes, or service recovery. Content copied or cached by others is outside our control.

9. Your choices and requests

You can edit your profile, change your account email, disconnect Discord, or delete your account from Settings. To ask for access to, correction of, or deletion of other information we hold about you, use the contact form and include your account username and a way to reply. We may need to verify that the request is yours. Depending on where you live, additional privacy rights may apply; we will handle requests as required by applicable law.

10. Security and age

We use password hashing, limited-access account sessions, and safeguards intended to protect stored information. No online service can guarantee absolute security. If you believe your account has been accessed without permission, tell us. Isolatedd is for people aged 13 or older. If you believe a child under 13 has provided us information, contact us so we can review and remove it as appropriate.

11. Changes to this policy

We will post policy changes here and update the date above. For significant changes, we will also provide an on-site notice. For privacy questions, use the contact form.