Privacy

This page says what bb.haruhime.moe stores, why, and for how long.

If you visit

We set no cookies unless you sign in, and run no analytics.

The editor saves your drafts, with the names you give them, in your own browser (its local storage), so they're there when you come back. They never reach our server unless you save one as a template. "Use" on a template leaves the filled-in text in the same place for the editor to open, and the editor removes it once it has.

Pictures, audio and videos in a preview load in your browser straight from wherever they're hosted, so that host sees your IP address when they load. We never fetch, pass through or store an image.

The collab maker runs entirely in your browser. The image you give it loads straight from its own host, like a preview's pictures, and bb never fetches, receives or stores it. The image's address, your regions and their links are saved in your own browser (its local storage), so they're there when you come back; "Clear" removes them. They never reach our server.

osu! players and pools

The Players tool and the collab maker's "Link players" send the names or ids you paste to our server, which looks them up with the osu! API. We keep what osu! answers (each player's osu! ID, username and country, or that osu! has no such user) for 24 hours, an hour for names osu! doesn't know, so the same lookup doesn't ask osu! again. We don't keep who asked or what list they pasted.

Pool import asks pools.haruhime.moe for the pool you name, without any of your cookies, and asks osu! for its maps. We keep each map's artist, title, difficulty name, mapper and star ratings for a week.

To stop floods, "Use" on a template, player lookups and pool imports count per IP address (an IPv6 address by its /64), in counters that are deleted automatically within about two hours; so does our share of calls to osu!. The count of how often a template was used holds no IP address.

If you sign in

Anyone with an osu! account can sign in, to save templates. For you we store the osu! user ID, username, avatar URL and country osu! sends, a record linking the account to osu! (never osu! tokens), session records that keep you signed in, with the IP address and browser User-Agent each session started from, and the templates you save.

When you're signed in, we also count, per account, how many template changes, reports and account deletions you make, in counters that are deleted automatically within about two hours. These counters use your osu! user ID, so deleting your account and signing in again doesn't reset them.

Signing in sets a session cookie, a short-lived one while sign-in runs, and bb-signed-in, which pages can read. It only says "this browser may be signed in", so pages ask who you are only when it's there. A session lasts until 7 days after you last use the site, and expired ones are deleted automatically.

Templates you save

A template keeps its name, description, kind, BBCode, fields, who owns it (osu! ID and username), how often it was used, and when it changed. Images and links inside a template are only their URLs: we never store the files. Public and unlisted templates can be seen by anyone with the link, and public ones are listed in the gallery with your osu! username. Private templates are seen only by you.

If you report a template, we keep your osu! ID, the reason and when, so you can report it only once. Only admins read reports. A public template three people report is hidden until an admin clears its reports; clearing keeps who reported it, so the same people can't hide it again.

Deleting

"Delete my account" on your account page deletes your account, every session, the link to osu!, every template you own and the reports on them, and the reports you made, at once. Each template you reported then counts one report fewer. Deleting a template removes it for good. Drafts in your browser stay there until you clear them.

What we never do

We don't sell or share any of this, and we don't host images.

Contact

Write to contact@haruhime.moe.