Privacy
Lei Moon Jar at leimoonjar.com · updated 15 November 2026
You can use the vase maker without an account. Then your designs stay in your own browser and nothing about you is sent to this site, apart from what any website receives when it serves a page.
If you create an account, the site keeps the following, only to sign you in and to keep your vases on every device.
What is kept
| What | Why | How long |
|---|---|---|
| Your email address, and your name if a sign-in provider shares it | To know which account is yours and to send sign-in codes | Until you delete your account |
| Which sign-in providers you have linked (for example Google) and the provider's account number for you | To recognise you when you sign in with them | Until you delete your account |
| Passkeys you add: the public key only. Your fingerprint or face never leaves your device. | To sign you in with a passkey | Until you delete your account |
| Your saved vases: their settings, names and small pictures, including any pattern made from a photo (a 96 × 96 relief, not the photo) | To show them on every device | Until you delete them or your account |
A sign-in cookie (sid), and short-lived cookies during sign-in | To keep you signed in. No advertising or tracking cookies are used. | 60 days, or until you sign out |
| A one-time sign-in code, stored scrambled | To check the code you type | 10 minutes |
Shared links
When you share a vase, its design, its name and a picture of it are stored under a short link that anyone with the link can open. Share links are not tied to your account. They last 30 days, or up to a year if the person sharing chooses, and are then deleted with their picture.
Who handles it
- Cloudflare hosts the site and stores the data.
- Resend sends sign-in codes by email, from its EU region.
- Google and any other provider you choose to sign in with confirm who you are. Their own privacy policies apply on their pages.
Nothing is sold, and nothing is used for advertising.
Your choices
- Download your data: in the vase maker, open Saved, then Download my data.
- Delete your account: in Saved, choose Delete my account. Your account, sign-in links, passkeys and saved vases are removed at once.
- Under UK and EU data protection law you can also ask for your data to be corrected, or object to how it is used.
Contact
Questions or requests about your data: privacy@brianskcheng.com. You can also complain to the UK Information Commissioner's Office at ico.org.uk.