Terms
What you may put on tinux host and Cardstock, how a share link works, and what a notice does. Privacy notice.
- Applies
- tinux host and Cardstock
- Sign-in
- Discord, verified email, 14 or older
- Law
- Spain, and the DSA where it applies
What these cover
Uploads on tinux host, boards and pictures on Cardstock, share links, and the Discord session those two share.
What they do not cover
The hub, Vigil, Clay, Sinopia, Linea, Proceduralis, and every other page that never asks Discord for an account. Those pages do not store a user row.
The account
Sign-in is Discord, with a verified email. The session cookie is the same on host and Cardstock.
- Host
- Invite-only. Discord ids in the whitelist table can upload.
- Cardstock
- Any verified Discord account that is not banned.
- Owner
- The first account to sign in while the whitelist is empty. That row cannot be banned.
Age
You must be 14 or older. The gate at /legal/enter/ records that, the privacy notice, and the terms for ten minutes so the Discord redirect can run.
What you may not upload
Do not upload material that is illegal to host in Spain or in the EU. That includes child sexual abuse material, and it includes material you have no right to put online.
Cardstock
- Boards
- JSON in D1, 400 KB per account
- Pictures
- R2, 200 KB after the page re-encodes them, 8 MB per account, 100 MB for the site
- Public URL
/cs/plus the id. Cached 120 seconds. A delete stops being served in minutes, not a year.
A YouTube or Vimeo block stores the video id. The player is not loaded until someone presses load on that card.
tinux host
- Files
- Images and video, sniffed by content. 95 MB a file, 200 MB an account, 9 GB the site
- Share page
/i/- File
/raw/. Range requests work. The extension on the URL is cosmetic.
Notices
Anyone can send a notice at /legal/report/ about a /b/, /cs/, /i/ or /raw/ URL. The form asks why the URL is illegal, and for a name and email except when the category is child sexual abuse material.
A notice in that category disables the URL immediately (HTTP 451). The operator then has to tell Spanish law enforcement. The file bytes are not emailed. Cloudflare is told through their abuse form if the operator still has something on their network to point at.
Other notices wait for a decision. If you left an email, the operator can write to it.
Bans
The owner can delete a picture, erase an account's files, and ban a Discord id. A ban stores a reason. That reason is shown the next time that Discord id tries to sign in, because this site does not keep Discord email addresses. The owner row cannot be banned.
Your own account
Settings on Cardstock, or the host page, can erase the account: boards, pictures, host files, session, user row. Export on Cardstock writes a JSON file of the boards. The owner account cannot use the erase button.
Discord
Sign-in is Discord OAuth. Discord's terms and privacy notice apply to that step. This site stores the Discord id, username and avatar hash. It does not store the email address.
Price
An account here is not billed. The ceilings (200 MB an account on host, 9 GB the site, 400 KB of boards and 8 MB of pictures on Cardstock) are the free-plan quotas, not a paid tier.
Spanish law
The operator is established in Spain. These terms are under Spanish law and, where it applies, EU law including the DSA. Privacy complaints go to the Agencia Española de Protección de Datos. How to write is on who.
If this page is wrong
The running code is what happens. If a line here disagrees with it, write to the email on who and the line gets fixed.