Privacy

This website is run by Zoxam.

In short: browsing and installing themes needs no account and records nothing about you. An account is only for publishing, liking and reporting; the website keeps the bare minimum. There is no advertising, no audience measurement and nothing loaded from another website.

Without an account

• The website keeps no log of your visits.
• When the RL-UI application installs a theme, it sends the website that theme's identifier, for the install counter. To count only once, the website keeps for two days a fingerprint of the IP address, computed with a secret key: the address cannot be recovered from it.
• If you report a theme without being signed in, the same fingerprint is kept with the report, to prevent floods.

With an account

• Sign-in with Twitch or Discord: the website receives and keeps your account identifier with them, your public name and your avatar (copied here). It asks for neither your e-mail address nor any access to your account, and does not keep the sign-in token.
• E-mail account: the website keeps your address, your display name, and a fingerprint of your password (scrypt, with a salt unique to your account). The password itself is never stored. Your address is only used to sign you in and to send the links you ask for (confirmation, new password); it is never displayed.
• What you do: the themes you publish, your likes, and your reports.

Your name, your avatar and your themes are public. Nothing else is.

Cookies

Only the ones that make the website work; none is used to track you.

• rlm_s: your session when you are signed in (30 days, extended as long as you come back).
• rlm_v: an anonymous token protecting forms against forged submissions.
• rlm_lang: the language you chose.
• rlm_o: ten minutes, during a Twitch or Discord sign-in.
• rlm_f: one minute, to show a message after an action ("Profile saved").

Retention and deletion

Your data is kept as long as your account exists. From "My account", you can download your data and delete your account: the account, themes, likes and avatar are erased immediately. Reports you made are kept, with no link to you.

Sharing

Your data is neither sold nor passed on. E-mails are delivered by the sending service the website uses, which therefore sees your address while sending.

Your rights

You can access, correct, retrieve and erase your data from "My account". If you live in the European Union, you can also contact your country's data protection authority.