Privacy Policy

In short

• You can use everything without an account. Signed out, we keep no account data about you.
• If you sign in, we keep a random user id, your display name and picture, your votes, favourites and any ideas you suggest. No email address.
• Image search runs in your browser. Your photos and searches are not uploaded.
• No ads, no analytics, no tracking pixels, nothing sold.
• You can delete your data at any time from the About AI page.

Who we are

Daeva Looks is a free, fan-made tool for Aion 2 players to find Style Shop character presets. It is a hobby project, not a company, and is not affiliated with NCSoft. To contact us, use the feedback form on the Roadmap page.

What we collect, and why

Only when you sign in. Signing in is optional; it lets you vote, suggest features and sync favourites.

• Your account: a random id we create (not your provider's), your display name and profile picture link, when you joined and when you were last seen.
• Linked login: which provider you used, your id at that provider, and that account's creation date when the provider shares it. We use this to recognise you next time and to block brand-new accounts (under 30 days old) so voting stays fair.
• Sessions: a record of your sign-in, stored as a hash of the cookie token so a database leak would not expose live sessions.
• Votes and favourites: which ideas you voted for and which presets you saved.
• Suggestions: the title and details you submit, plus the result of an automatic check (a category, a confidence score and, if held back, a reason) and a text embedding used to spot duplicates. Suggestions are shown publicly without your name.
• Abuse protection: daily counters that rate-limit actions, and a ban record (with a reason) if an account is banned.

What stays in your browser

Signed out, favourites are kept in your browser only. Your theme choice and whether you accepted the AI notice are also stored locally. Images you search with are processed on your device and never sent to us.

What we don't collect

• No email address, phone number, real name or payment details.
• No friends lists, servers, messages, or permission to post for you.
• No analytics, advertising, tracking pixels or third-party trackers.
• No uploads of the images you search with.

Sign-in providers

Sign-in is with Discord only. We request the smallest permission it offers, the identify scope: your basic public profile. From it we keep your account id, display name, picture and account creation date (derived from your Discord id). Discord's own privacy policy applies to the sign-in step on their site.

Cookies and local storage

We use no tracking cookies. What we do use:

dl_session (cookie)

Keeps you signed in. Set only when you sign in; lasts up to 30 days.

dl_oauth (cookie)

A short-lived security check used only while you are signing in.

a2f-ai-consent (local storage)

Remembers that you accepted the AI notice, and when.

a2f-theme (local storage)

Your light/dark theme choice.

daeva-looks:favourites (local storage)

Favourites saved while signed out.

You can clear these at any time in your browser settings.

AI processing

• Image and look search uses an open model (SigLIP 2) that runs inside your browser. The model files are served from this site. Your images and queries stay on your device.
• Suggestions you submit are checked by AI models running on Cloudflare Workers AI (an open Llama model for moderation and categorising, and an embedding model to find duplicates). Nothing is sent to an outside AI company.

More detail on the About AI page.

Services your browser contacts

• Cloudflare hosts the site, database and storage. Like any web host, it processes your IP address and request details to deliver pages and stop attacks, and keeps short-lived operational logs.
• PlayNC / NCSoft CDN: preset screenshots load from NCSoft's image servers (or through our image proxy), so they see a normal image request.
• AniList and Wikipedia: when you search by a character name, your browser looks the name up there to find reference pictures.
• Your sign-in provider, only when you choose to sign in.

We no longer load models from Hugging Face; they are self-hosted.

How long we keep data

• Sign-in sessions: up to 30 days, or until you sign out.
• Account, votes and favourites: until you delete your data.
• Suggestions: kept after you delete your data, but with the author link removed. Suggestions rejected by moderation are kept, with the reason, to improve the filter and for statistics.
• Rate-limit counters: about a day.

Your choices and deleting your data

Use the site signed out, sign out from the account menu, or press Delete my data on the About AI page while signed in. That permanently removes your account, linked logins, sessions, votes, favourites, counters and any ban record, and signs you out. For anything else, use the feedback form on the Roadmap page.

Children

Daeva Looks is not directed at children under 13. Sign-in providers apply their own minimum age rules, and you must meet them to sign in.

Changes

If this policy changes, we'll update this page and its effective date. Significant changes will be noted on the site.