Privacy Policy
Cursed Images collects the limited information needed to operate the archive, receive reports, protect forms from spam, and understand basic product usage.
Public browsing does not require an account. For the controlled Beta, the site creates a random visitor identifier in local browser storage and a random session identifier in session storage. The visitor identifier can persist across browsing sessions; the session identifier is scoped to the browser tab or session. These identifiers are not names or account IDs, but they are pseudonymous identifiers rather than a guarantee of anonymity.
Product measurement records the event schema version, event type, image, page path, product surface, feed position, curation tier, category, Featured-set version, campaign or Beta cohort, search query or share method when relevant, valid-view visibility qualification, and image or feed load outcomes. It does not record image load duration. Authenticated administrator traffic, controlled test clients, known bot or automation user agents, and conservative server-observed session, visitor, cadence, order, and position anomalies are excluded from the Beta baseline. These checks reduce obvious distortion but do not claim to prevent every automated or manipulated event. The user agent can be evaluated for this purpose but is not stored in the content-event record, and measurement does not store a raw IP address or IP hash.
Campaign and cohort values can come from limited URL parameters and are fixed in session storage when measurement begins for the current session. Administrator exclusion is derived from the authenticated server session; the public client cannot mark its own events as trusted or excluded. Measurement is used to understand browsing depth, discovery paths, sharing, reliability, and whether the archive is useful enough to proceed beyond Beta. A visitor contributes no more than three qualifying sessions to the Beta baseline.
After ten valid image views in a qualifying Beta browsing session, the site may show one optional two-question survey asking whether the archive felt genuinely cursed and how familiar you are with cursed images. The response or dismissal, anonymous IDs, campaign or cohort, current content context, and valid-view count are stored. Survey shown or handled status is kept in local browser storage so it is not offered again; an unsent dismissal or response may remain there temporarily for delivery retry. Survey answers do not create public reactions, image scores, profiles, or login records.
Report and copyright forms can store your message, optional email address, optional source URL, the affected image slug, hashed IP address, user agent, and Turnstile verification result.
Auth/admin code exists for later phases. If account access is enabled, account data can include email address, display name, sign-in method, session records, and security credentials such as passkeys.
Measurement events and Beta survey responses are stored on the site's server for product analysis. No fixed measurement-retention duration has been approved; this policy does not claim one. Browser storage can be removed using your browser's site-data controls.
Contact the site operator at contact@cursedimages.org for access, correction, deletion, or privacy questions.