Axostichus ID Privacy Policy

Last Updated: 6 September 2026

Axostichus.org ("we," "us," or "our") operates Axostichus ID, the shared account, sign-in, and billing system for our services, including Snout.nu and Consequat (each, a "Service"). This Privacy Policy explains how we handle personal data across Axostichus ID and each connected Service.

1. Scope of This Policy

This Policy sets out principles and practices that apply to your Axostichus ID account and to every Service you access with it. Each Service also has a lettered Addendum (Addendum A, Addendum B, and so on) at the bottom of this Policy, describing data practices specific to that Service, because certain kinds of data (such as blog content or uploaded images) only exist within that Service.

If a Service processes data in a way not described in its addendum, that processing is still governed by the shared principles in the core sections below.

2. What We Collect and Why

When you create an Axostichus ID, we process the following categories of personal data:

Email address. Required to create your account. We use it to identify you, enable sign-in and account recovery, and communicate with you about your account or billing. We process this because it is necessary to provide the account you've requested.
Payment information. We retain a minimal transaction record (amount, method, date, and processor) for financial reconciliation and to meet our legal obligations, including tax recordkeeping requirements. Full payment details are handled by our payment processors, such as Stripe, who act as independent controllers of that data.
Correspondence. If you contact us for support, we retain your email and message content for as long as needed to resolve your request and maintain a reasonable support history. We process this because it is necessary to provide the support you've requested.

Your Axostichus ID is used to sign in to each Service through single sign-on. To make this work, we share a limited set of account information (your account identifier and email address) with each Service you use. Each Service may collect additional data specific to what it does. Those practices are described in the addendum for that Service.

3. Payment Records and Retention

We retain transaction receipts (amount, method, date, and processor) for seven years to comply with applicable tax recordkeeping obligations, including those of the U.S. Internal Revenue Service. This retention period applies regardless of whether your account remains active or is later deleted.

For certain payment methods, a transaction identifier is temporarily linked to your account for 28 days to allow us to manage chargebacks. After 28 days, that link is permanently removed.

4. Cookies

We use a single, strictly necessary cookie to keep you signed in to Axostichus ID and any connected Service during your session. This cookie is removed when you close your browser. Because it is strictly necessary to provide the account functionality you've requested, it does not require a consent banner. We do not use cookies for tracking, analytics, or marketing purposes.

We work with a small number of third-party providers to host and operate our Services. A current list of sub-processors is available at: https\://help.snout.nu/posts/data-sub-processors.

Some of these providers are located outside the European Economic Area. Where that is the case, we ensure the transfer is protected by appropriate legal safeguards, such as the European Commission's Standard Contractual Clauses or the UK's International Data Transfer Agreement.

We do not sell your personal data. We disclose data to third parties, such as law enforcement, only where we are legally required to do so.

6. Security and Abuse Prevention

We generally do not log or store your IP address during ordinary use of our Services. However, to protect the integrity of our systems, we process IP addresses where necessary to investigate and stop specific security threats or abuse. We do this because it is necessary for our legitimate interest in keeping our systems secure, which we have weighed against your privacy interests. For example, an IP address that repeatedly attempts unauthorized server access may be automatically blocked using tools such as fail2ban.

You have the following rights regarding your personal data:

Right of Access. Request a copy of the personal data we hold about you.
Right to Rectification. Ask us to correct inaccurate or incomplete data.
Right to Erasure ("right to be forgotten"). Ask us to delete your personal data.
Right to Restriction of Processing. Ask us to temporarily limit how we use your data.
Right to Data Portability. Request your data in a structured, machine-readable format.
Right to Object. Object to processing based on our legitimate interests, such as the security and abuse prevention processing described in Section 6.
Rights Related to Automated Decision-Making. We do not use automated decision-making or profiling, so this does not apply to our processing.
Right to Redress. You may lodge a complaint with a supervisory authority in your country if you believe our processing violates the law.

To exercise any of these rights, please contact us using the details in Section 11.

8. What We Do Not Do

We do not use your data for marketing purposes or share it in any manner that is not described in this Privacy Policy

9. Data Retention

We retain your Axostichus ID account and associated Service content until you request deletion. This includes blog posts, uploaded images, forwarded email messages, and image board content. Following a verified deletion request, your data is removed from our production systems, though it may persist in encrypted backups for up to 28 days before permanent deletion.

Transaction receipts are retained for seven years regardless of account deletion, as described in Section 3.

10. Policy Updates

We will notify you by email before making any significant change to this Policy that affects how we process your data or the rights available to you.

11. Contact Us

For questions about this Policy or to exercise your rights, please contact us at: privacy@[this domain]

Addendum A: Snout.nu

If you use Snout.nu, the following additional practices apply:

User content. We process the text posts and images you upload to provide your blog and to host the files used within your posts. By uploading content, you grant us the license necessary to store and display it until you delete it.

Email forwarding data. If you use email forwarding (inbox.snout.nu), we process the sender's email address, subject line, and message content sent to your forwarding address (for example, bark@inbox.snout.nu) in order to deliver it to your private dashboard. You may delete forwarded messages at any time.

Analytics. On the main snout.nu site, we use Umami for anonymous, cookie-free analytics. This data is aggregated and publicly viewable at https://magic.snout.nu/share/HUxL1ZyyFnhlIs5v. On individual blogs, we provide basic public analytics about visitors, including country, page viewed, device type, and referrer source, viewable at https\://analytics.snout.nu. We do not store IP addresses for this purpose.

Because this analytics data is anonymous and aggregated (for example, "10 visitors from France"), it contains no identifiers and cannot be linked to a specific individual. As a result, we are unable to locate, correct, or delete analytics data corresponding to a single visitor.

Data Sub-processors specific to Snout.nu: https://help.snout.nu/posts/data-sub-processors

Addendum B: Consequat

If you use Consequat, the following additional practices apply:

Images. We process the images you upload as necessary to provide the core service: discovery, indexing, and search.

Search. Search combines keyword matching with color similarity filtering in perceptual color space (CIELAB). Gorse is not queried during search, since doing so would skew results.

Sub-processors specific to Consequat:

Contabo GmbH: hosting for the website, dashboard, and S3 image storage
Bunnyway d.o.o.: image delivery
Backblaze, Inc: backup of images and account data

axostichus