Privacy Policy

Last updated: October 26, 2026

This notice covers dentedprinter.com and play.dentedprinter.com (Slawcade). The site is run by Dented Printer, based in Ontario, Canada. The owner of Dented Printer is responsible for privacy here and answers privacy questions at dylan@dentedprinter.com.

Some of our tools have their own, more detailed policy, which applies together with this one:

Cardlink (browser extension)
Gems
I Don’t Like This Post and the Loserboards
4w1z.io short links
DP Social Publisher, our WordPress plugin for other site owners, and its data deletion instructions

The short version

No ads, no analytics and no tracking cookies. Just reading the site sets no cookies.
We only get what you choose to send: a comment, a message, a shared gem, a Threads sign-in or an optional account.
We don’t sell or rent personal information, and we don’t use it for advertising.

When you visit

Like any website, our web host, DreamHost, receives your IP address, browser details, the page you asked for and the page that sent you. It keeps them in access logs for about 7 days and uses them to produce aggregate visit statistics. We use logs only to keep the site running and secure.

Some pages load shared files from other services, so your browser connects to them directly and they receive your IP address and browser details: icons from cdnjs (Cloudflare) on every page, fonts from Google Fonts on the home page, and the Gems 3D library from cdnjs and jsDelivr. Slawcade loads everything from our own server. Links to Threads, PayPal and browser extension stores send nothing until you click them.

What stays in your browser

A few settings are saved in your browser’s local storage on your device. They aren’t cookies, they aren’t sent to us, and you can remove them by clearing this site’s data in your browser settings.

Saved item	What it remembers
`dp-theme`	Light or dark mode
`dp-bio-desktop`	Whether the home page bio is expanded
`dp-liked`, `dp-liked-comments`	Posts and comments you liked on this device
`dp-comment-draft`	A comment you started (including the name and email you typed) while you sign in, so it isn’t lost; removed when you post it
`slop-cannon-…`	Your gem designs and Gems panel settings
Slawcade items	Your arcade wallet, prizes and settings on play.dentedprinter.com. Slawcade has no accounts and sends none of this to us.

Comments

To comment, you give a name and email address. We store them with your comment, along with your IP address, browser details and the time, to fight spam and abuse. Your name and comment are public; your email address and IP address are not. Commenters are shown with coloured initials, so we don’t send your email address to Gravatar or any other avatar service. A first comment may wait for approval.

After 30 days, the IP address and browser details are cleared automatically; the comment itself, your name and email address stay as long as the comment stays on the site. Comments caught as spam are deleted 30 days after they were made. You can ask us to delete your comment or its details at any time at dylan@dentedprinter.com.

Instead of typing a name and email, you can sign in with your Threads account. Threads (Meta) will ask you to approve the request, which lists permissions to read your basic profile, publish and manage replies, reply to posts that aren’t yours, and delete your posts. We use your Threads user ID, username and profile link to label your comments. We use the other permissions only when you choose to post a comment to Threads or to delete one you posted from here. We don’t ask to see your insights or read your replies.

Sign-in passes through our own relay on dentedprinter.com, which swaps Meta’s one-time code for an access token and hands it to the site without storing it. The site then keeps the token, your Threads user ID and username on its server for up to 60 days. Your browser gets these cookies:

dpsp_login_transaction: protects the sign-in step; 10 minutes.
dpsp_ts: a random session reference (the token itself never reaches your browser); up to 60 days.
comment_author_…: WordPress’s usual comment cookies, filled with your Threads username and profile link so the comment form knows who you are.

Signing out deletes the session on our server and these cookies. Comments you make while signed in are stored with your Threads username and profile link, and an internal placeholder instead of an email address.

If you turn on Post to Threads, your comment is also published on Threads as a reply from your account, where Meta’s own terms and privacy policy apply. While signed in, you can delete a reply you posted this way from here; that removes it from both Threads and this site.

Replies from Threads

Many posts here are also posted on Threads. We don’t copy replies from Threads into the comments here; they stay on Threads. The few replies copied before October 2026 have been removed. We only read the total number of likes on our own Threads posts.

GIFs

Signed-in commenters can add a GIF. GIF searches pass through our server to Giphy with only the search words, and GIFs shown in comments load from Giphy’s servers, which receive your IP address and browser details.

Contact form

The contact form sends your name, email address, subject and message as an email to the owner’s dentedprinter.com mailbox, which DreamHost hosts. The site doesn’t keep its own copy. We use your message only to reply, and keep it in the inbox only as long as needed to deal with it.

Search

Searches are handled by the site itself. Your search words appear in the page address, so they are in the access logs for about 7 days.

Accounts

Accounts are optional and only for people 16 or older. Everything on the site works without one. When you create an account we store:

your email address, which is never shown publicly;
your handle (shown as @handle) and an optional display name, both public where you use them;
when the account was created and last used, when you confirmed you are 16 or older, and which version of this notice you accepted;
if you connect Google, your Google account ID;
for each browser you are signed in on: the time you signed in and a rough browser name, such as “Firefox on Windows”. We don’t keep your IP address for this.

There are no passwords. To sign in, you ask for a link and we email it to you from our DreamHost mailbox. The link works once, for 15 minutes (a sign-up link lasts 24 hours), and we store only a scrambled form of it. To stop abuse, we limit how many links an email address or a connection can ask for, using scrambled forms of the address and of your IP address that expire within a day.

If you choose Continue with Google, Google tells us your Google account ID, your email address, whether Google has verified it, and your name. We use them only to sign you in and to fill in your display name if you like. If that email already has an account here, we don’t join the two on our own: we email that address a link to confirm.

While you are signed in, your browser keeps WordPress’s sign-in cookies (wordpress_logged_in_… and wordpress_sec_…) for up to 14 days, and dp_ac_google for 10 minutes while a Google sign-in is in progress. Signing out removes them; Sign out everywhere on your account page ends every signed-in browser.

We email you only about your account: sign-in links, security notices, warnings before an unused account is deleted, and a receipt when an account is deleted. No newsletters or marketing.

On your account page you can change your handle and display name, connect or disconnect Google, download everything your account holds as a file, and delete your account. Deleting it removes the account straight away and takes your name and email off your comments. An account that isn’t used for 12 months is deleted automatically, after we email a warning at about 11 months.

You may save an optional plain-text bio of up to 160 Unicode characters. Profiles are private by default. Only if you explicitly publish your profile can anyone with its link see your site handle, display name and saved bio. We store that publication choice and its consent time. Public profiles do not show your email, internal account identifiers or an automatic Threads link. Saved bio edits appear on a published profile. Making it private removes active public access, but other people may keep copies. Changing your handle changes the link; old links are not forwarded.

Creating an account requires separate acceptance of the account terms. We store the accepted terms version and acceptance time, as well as the privacy-notice version. Your download includes your bio, visibility and consent records; you can clear your bio, withdraw profile publication or delete the account. Account deletion removes these active account records, subject to the backup periods below.

Optional account-owned Threads linking is separate from the existing comment sign-in described above. Meta verifies your identity using basic profile access through our relay. We store your Threads user ID, username, verification time and validity deadline, capped at 60 days. The one-use linking transaction lasts 10 minutes and is bound to your signed-in account and browser using a short-lived HttpOnly cookie named dp_account_threads_link; the server stores a hash of its browser secret. The access token is used to check the profile and is not saved by this account-linking feature. Verification expiring stops its use; this does not promise immediate physical deletion of the metadata. Disconnecting or erasing the linked identity removes its active connection records, and account deletion removes them too.

Threads linking does not enroll you in Loserboards, enable Superdislikes, import comments or publish anything. Allowing verified Threads attribution on awards is a separate optional preference, recorded with its choice time and included in export and erasure. Saving that preference does not create an award, share card, short link or automated Threads announcement. Those integrations are still being developed and are not enabled by this account connection.

Gems

Designing a gem happens in your browser. When you share one, the picture and settings are stored on our server and the link is shortened with 4w1z.io; nothing about you is sent with it. Shared gems are deleted 30 days after they were last opened. See the Gems privacy policy.

Loserboards and I Don’t Like This Post

The Loserboards, stats and account pages on this site load their data from the I Don’t Like This Post service at api.idontlikethispost.dentedprinter.com, which runs separately from this website. Your browser connects to it directly. If you sign in there with Threads, it sets its own cookies (idltp_oauth_transaction for 10 minutes and idltp_session for up to 30 days). See the I Don’t Like This Post privacy policy.

Cardlink and 4w1z

The Cardlink pages here only describe the extension; the extension itself is covered by the Cardlink privacy policy. 4w1z.io is our link shortener, used for Cardlink and shared gems, and has its own privacy notice.

Who else receives information

DreamHost hosts the site, its database, backups, logs, the site’s mailbox and outgoing email (United States).
Google serves the home page fonts and, if you choose Google sign-in, confirms your Google account to us.
Meta handles Threads sign-in and the replies you choose to post to Threads.
Cloudflare (cdnjs) and jsDelivr serve shared code and icons.
Giphy receives GIF search words and serves GIFs.

We share personal information with anyone else only when the law requires it, or to protect the site and its visitors from abuse.

Where information is stored

The site and its data are stored by DreamHost in the United States (Virginia). The services above may process information in the United States and other countries. Privacy laws there may differ from those where you live, and local authorities may be able to access information under their laws.

How long we keep it

Access logs: about 7 days.
Host backups: database backups about 9 days, file backups about 2 weeks. Deleted information can remain in a backup until that backup expires.
Comment IP addresses and browser details: 30 days.
Comments, with the name and email address given: as long as the comment stays on the site.
Comments caught as spam: 30 days.
Accounts: until you delete them, or 12 months after you last used them.
Sign-in links: 15 minutes (sign-up links 24 hours); once used they can’t be used again.
Counters that limit sign-in link requests: up to a day.
Threads sign-in sessions: up to 60 days, or until you sign out.
Contact messages: in the inbox as long as needed to deal with them.
Shared gems: 30 days after they were last opened.
Browser storage: until you clear it.

Your rights

You can ask to access, correct or delete your personal information, get a copy in a portable format, object to or restrict certain uses, or withdraw your consent where we rely on it. Email dylan@dentedprinter.com. We may need to confirm it’s you, for example by replying from the email address on your comment or by signing in with Threads, and we aim to reply within 30 days. If you have an account, you can download your data and delete your account yourself on your account page.

If you live in the EU or UK: we rely on your consent for Threads sign-in and posting to Threads, on providing the account you asked for (a contract with you) for accounts, and on our legitimate interests for running the site securely, fighting spam and answering messages.

If you’re not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec if you live in Quebec, or your local data protection authority if you live elsewhere.

Security

The site is only served over HTTPS, access tokens stay on our server, sign-in links are stored only in scrambled form, and administrator access is limited to the owner. No system is perfectly secure. If a breach creates a real risk of significant harm, we will tell the people affected and the authorities as the law requires.

Children

This site isn’t meant for children under 14, and we don’t knowingly collect their information. Accounts are only for people 16 or older. If you think a child has sent us personal information, email dylan@dentedprinter.com and we will delete it.

Changes

When this notice changes, we update the date at the top. For important changes, we will also say so on the site.

Contact

Dented Printer, Ontario, Canada. dylan@dentedprinter.com

Bios can also contain up to eight inline stickers. We store a versioned document containing text, selected first-party sticker identifiers or GIPHY identifiers and alternative labels, alongside a text bio. Your account download includes the document and readable labels; clearing or deleting the bio removes its active sticker document. GIPHY search and external sticker loading are currently unavailable; no GIPHY request is made by this account release.

Private Gems and award drafts

Your account can save up to 12 named Gem designs and 25 private award drafts or unsent offers. An offer stores its creation time and pending status with the draft. Offers are currently not sent; the post author must opt in before a Gem can be featured. We store their design settings, renderer/schema version, creation time and account ownership. A draft also stores the Threads post link and shortcode, your optional message and a copy of the selected design. Saving a draft does not publish an award or a Threads reply, import post content, or identify its author as a participant. For a Threads share link, our server may request redirect headers from Threads to find the full post address. These requests send no account tokens, browser cookies, email or bio; Threads receives the link and our server’s connection information. Full post links need no such request.

Choosing a browser-saved look stages its settings; Save Gem or Save to account copies those settings to your account. Custom logo uploads are not copied. Requested 3D previews use Gem Maker and its existing pinned rendering scripts from cdnjs and jsDelivr; those providers receive ordinary browser requests. Post links and design settings stay on this site for these private flows.

You can delete each design or draft and include your library in your account download. Deleting a design leaves the independent copy in an existing draft; delete that draft to remove its copy. Account deletion removes the active library. We retain designs and drafts until you delete them or your account; no scheduled expiry is promised. Browser-saved looks, downloaded copies and existing hosting logs/backups are separate from active-library deletion. If a backup is restored, deletion requests must be reapplied before member access resumes. Contact dylan@dentedprinter.com if you need help with access, correction, deletion or an unavailable library.

Signing in to GreatPosts

greatpost-buddy.net uses your DentedPrinter account to sign in. A single-use sign-in code expires after two minutes. Secure GreatPosts cookies keep you signed in for up to one day, without sharing the DentedPrinter sign-in cookie across domains. Session references are stored as hashes; temporary sign-in files expire after 30 minutes. Signing out of the associated DentedPrinter session, changing your password or deleting your account revokes that access. Account exports include session dates, and erasure removes GreatPosts sessions.

GreatPosts celebration images

After the author accepts, Cloudflare Browser Run receives a short-lived private rendering address to make an image of the original post, the selected Diamond and the public attribution on the card. Private notes and email addresses are excluded. The image is shared on Threads. We keep the file outside the public website folder and allow image delivery only while the award is active. Withdrawal immediately revokes that URL and queues the file and bot posts for removal; copies already downloaded or cached elsewhere cannot be recalled. New image-backed awards are not added to website cards or the website feed by Threads acceptance.