Privacy policy

What we collect

• Account data: the name you choose and your email address. The password is stored only as a cryptographic hash (PBKDF2-SHA256 with a salt), never in clear text.
• The projects you save: scene geometry, project name and preview image.
• Minimal technical data needed to operate: a session cookie and the time of your last activity.
• Comments you write on public projects.

Why we use it

• To give you the account and the project library.
• To keep the version history so you can roll back.
• To prevent abuse (rate limiting of login attempts).

Cookies

We use a single first-party, strictly necessary cookie: the session cookie that keeps you logged in. We do not track your behaviour across other websites.

If ads are displayed through Google AdSense, Google and its partners may use cookies to serve relevant ads. Details are in the cookie policy.

Who else sees the data

We do not sell or rent data. Your projects are private until you press Share; then they become accessible to anyone with the link, and if they appear in the gallery they are public together with your display name.

How long we keep it

Account and projects are kept as long as the account exists. The history keeps the last 20 versions of each project. On request we delete the account and everything attached to it.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection under the GDPR. Send your request to contact@warhial.ro and we reply within 30 days.

Security

Passwords are stored as salted hashes. Sessions use random tokens in HttpOnly cookies. Project access is checked on the server for every request.

Children

The service is not aimed at children under 16. If we learn we collected data from a child under that age, we delete it.

Changes

If we change this policy we update the date below and, for important changes, announce it in the application.