Privacy and Disclaimer

Last updated: 2026-10-09

Who Runs This

piculum.com, the piculum workbench, and the developer API are run by Jeff Slarve as an individual. The piculum npm library is published under the MIT license.

Questions, or a request to delete the email stored with an API key: support@piculum.com.

The Workbench

• Designing, encoding, and decoding all happen in your browser. Your pictures, your data, and your passwords are not uploaded.
• Your work is saved in this browser's own storage (IndexedDB) on this device, and nowhere else. Clearing the site's data in your browser deletes it.
• When "Save passwords" is ticked, an encode's password is saved with it, encrypted, in that same browser storage. Untick it if other people use your login.
• The starter templates are downloaded from this site the first time the workbench opens, then kept in the same browser storage.
• If you install the workbench as an app, your browser caches the site's files so it can run offline.

The npm Library

The piculum library runs on your own machine. It does not contact piculum.com or any other server.

The Developer API (Beta)

• Signing up for a beta key stores your email address, a hash of your key, and the date the key was created (plus a revoked flag if the key is ever revoked). The key itself is shown to you once and is not stored. Your email is used only to contact you about the beta.
• To limit signups, a hash of your IP address is kept with a daily counter that expires on its own after about a day.
• The signup form uses Cloudflare Turnstile to keep bots out. Turnstile loads from Cloudflare on the API page only.
• Everything sent to the /v1/ endpoints - templates, mask definitions, records, and passwords - is processed in memory and is not logged or stored. Per-key request counters, used for rate limits, expire within minutes.

Hosting

The site is hosted on Cloudflare Pages, and the API runs on Cloudflare Workers. Cloudflare handles each request to serve it, which includes your IP address and browser details; see Cloudflare's privacy policy. The site's pages load no analytics or advertising scripts and set no cookies of their own.

The operator does not sell your data or share it except with the service providers described above.

Disclaimer

• Everything here - the site, the workbench, the developer API, and the library - is provided as is, without warranty of any kind. Use it at your own risk.
• This site is under construction. Features, file details, and the API may change, and the API may be paused or its keys revoked during the beta.
• There is no password recovery. Lose the password, or a separately saved mask file, and the data is gone. Nobody, including the operator, can open it for you.
• Workbench data lives only in your browser. Keep the PNG files you download; they are your backup.
• Screenshots and apps that recompress images destroy the data inside a piculum. Send the file itself.
• You are responsible for what you put into a piculum and for having the right to process it.
• The operator is not liable for any loss or damage arising from use of the site, the workbench, the developer API, or the library.

Changes

This page will be updated as the site changes. The date at the top shows when it last changed.