··

Legal

2026-08-22

empty.tokyo is a private site for a handful of people. It is not a business, it sells nothing, and it runs no advertising and no analytics. What follows describes what the site actually does with data, written from the code rather than from a template.

What is stored

Account
Email, username, and your password as a hash that cannot be read back.
until deleted
Profile
Display name, bio, pronouns, country, accent colour, links, avatar and banner.
until deleted
Content
Forum threads and posts, messages, group posts, pastes, reactions, poll votes, bookmarks.
until deleted
Connections
Friends, blocked accounts, group memberships and invitations.
until deleted
Linked accounts
Your Discord and GitHub handles and your Minecraft UUID, if you link them.
until unlinked
Minecraft client
Whether you are online, and the client settings you have chosen.
until deleted
Notifications
The push endpoint your browser gives out, and which browser it was.
until switched off
Moderation
Reports, restrictions, username changes and a log of administrator actions.
kept
IP address
Used as a key and never shown: to rate-limit requests, and to count a paste view once per reader.
24 h / 6 h

Who else it touches

Running a site means other companies handle parts of it. These are all of them, and what each one gets.

Vercel
Hosting. Every request passes through it. Functions run in Frankfurt.
Neon
The database. Everything written here lives in it.
Resend
Sends the few emails there are: address verification and password resets.
Discord
Only if you link it. Sign-in, and your avatar and banner load from Discord's own servers.
GitHub
Only if you link it, to show the handle on your profile.
Mineatar
Renders the head of your Minecraft skin from your UUID.
flagcdn
The small country flag next to a profile location.

The last four are loaded by your browser directly, which means those services see your IP address the same way any site you visit does. Nothing is sold, and nothing leaves here for any purpose other than running the site.

Cookies

auth_token
Keeps you signed in.
until you sign out
locale
The language you picked.
1 year
reducedMotion
Whether you asked for less movement.
until cleared
discord_oauth_state
A one-time check while linking Discord, so nobody can link an account on your behalf.
minutes

There are no tracking cookies and no analytics of any kind. Three small things are kept in your browser rather than in a cookie — whether you dismissed the announcement, the welcome note and the messages hint — and they never leave your device.

What you can do

Export
Settings hands you a file with everything above that is yours: profile, posts, messages, pastes, groups, badges, linked accounts. What other people wrote is not in it — their half of a conversation is theirs.
Delete
Settings deletes your account and everything attached to it, immediately and for good. It is not reversible and there is no grace period.
Anything else
Ask. There are few enough of us that this is a conversation, not a ticket.

The rules

  • One account per person.
  • Nothing illegal, hateful, or aimed at harassing someone.
  • No spam, no scraping, no automated use of the site.
  • Treat the others well. There are only a few of you.
  • Content that breaks these can be removed, and accounts that break them can be suspended.
  • You are responsible for what you post.

Contact

Anything about your data, or anything else on this page:

admin@durchdacht.me

The imprint is at durchdacht.me.