Privacy Policy

Last updated: May 2026

sref.site is a free tool for browsing and saving Midjourney style reference codes. This policy explains what limited data we collect and how it is used.

Who we are

sref.site is operated as a personal project. If you have privacy questions, email us at sref.site@gmail.com.

What data we collect

If you sign in with Discord

When you choose to sign in, Discord shares the following with us via OAuth2:

• Your Discord user ID
• Your Discord username
• Your Discord avatar hash (used to display your profile picture)

We do not receive your email address, password, server memberships, or messages. We store only the above in our database, along with the date you first signed in, the date of your last login, and the sref codes you have saved as favourites.

If you do not sign in

We collect no personal data. Favourites and your dark/light mode preference are stored only in your browser's localStorage and never sent to our servers.

How we use your data

• To display your username and avatar while you are signed in
• To save and sync your favourite sref codes across devices

We do not sell, share, or use your data for advertising or analytics.

Cookies and local storage

We use a single session cookie (PHPSESSID) to maintain your login state. This cookie is strictly necessary and is deleted when you close your browser or sign out.

We also use localStorage (not cookies) to store:

• sref_favs — favourite style codes for guests (not yet signed in)
• sref_theme — your light/dark mode preference

No third-party tracking, advertising, or analytics cookies are used on this site.

Third-party services

• Discord — used for sign-in. When you click "Sign in with Discord" you are subject to Discord's Privacy Policy.
• Google Fonts — fonts are loaded from Google's CDN, which may log your IP address. See Google's Privacy Policy.

Data retention and deletion

Your account data (Discord ID, username, avatar, and saved favourites) is retained while you have an account.

You can permanently delete your account and all associated data at any time from your account page — no email required. Deletion is immediate and cannot be undone. Alternatively, email sref.site@gmail.com and we will remove it within 7 days.

Your rights (GDPR)

If you are in the European Economic Area you have the right to access, correct, or delete the personal data we hold about you. As we collect very little data, deletion is straightforward — use the self-service option on your account page or contact us directly.

Changes to this policy

We may update this policy occasionally. The "Last updated" date at the top will reflect any changes.