Trust Center

Trust, security & privacy.

This page is maintained by the ofx scenepacks team to answer common security and privacy questions about the ofx scenepacks library. It describes current, app-visible practices — it is not an independent certification or audit.

Shared responsibility

ofx scenepacks runs on the Lovable Cloud platform. Lovable provides hosting, the managed database, authentication primitives, and edge runtime. The ofx scenepacks team is responsible for what we build on top of that platform: the application code, access rules, what data we collect, and how we respond to user requests. Customer accounts are responsible for keeping their own credentials safe.

Access & authentication

The public library is browsable without an account. Administrative actions (creating or editing scenepacks, seasons, and characters) require signing in and are gated by a server-side admin role check — client-side flags alone do not grant access. Admin role assignments are managed manually by the ofx scenepacks team via the backend, not through self-service signup.

Data we collect

For visitors, we collect only what is needed to serve the site and basic aggregate usage signals (e.g. download counters on individual scenepacks). For admin accounts, we store the email address used to sign in and the role assigned to that account. We do not sell personal data.

Storage & database access

Database tables are protected with row-level security. Public tables expose only data that is intentionally public (published scenepacks and their associated seasons, characters, and cover images). Write access is restricted to authenticated administrators.

Subprocessors

We rely on Lovable Cloud for hosting, database, authentication, and storage. We use Google Fonts for typography and Vercel Speed Insights for anonymous performance metrics. We do not use third-party advertising trackers.

Cookies & analytics

The site uses functional storage for theme preference and, for signed-in admins, an authentication session token. Anonymous performance metrics are collected via Vercel Speed Insights to monitor page load times.

Retention & deletion

Public scenepack content is retained while it remains part of the library. Admin account data is retained while the account is active. If you are an admin and would like your account removed, contact us using the address below.

Reporting a security issue

If you believe you have found a security vulnerability in ofx scenepacks, please report it privately by emailing the address listed on our contact channels rather than opening a public issue. We will acknowledge reports and work on a fix as quickly as we can.

DMCA & takedowns

ofx scenepacks hosts community-submitted edits. If you are a rights holder and believe content should be removed, contact us via the DMCA link in the footer with the relevant details and we will review the request.

This page is editable content maintained by the ofx scenepacks team. It is not a certification, audit report, or legal agreement. For questions, use the contact links in the footer or return to the home page.