Terms
Plain rules, written so you can actually read them. If any of this changes in a way that matters, it will be in the changelog.
Last changed 21 September 2026
Who can have one
Anyone with an email address they can receive mail at. One account per person, one username per account, and the username does not change once it is taken.
You are responsible for what happens under your account. Do not share your password. If you think somebody else is in it, change it.
What you may not put on a page
Anything illegal where you are or where this site is hosted. Sexual content involving minors, of any kind, in any form. Content that exists to harass a specific person. Malware, phishing, or links that pretend to be something they are not.
Impersonating somebody else, or presenting yourself as part of mutate.lol when you are not. Some names are held back for that reason and cannot be registered.
You keep whatever rights you already had in what you upload. You are confirming you have the right to upload it, and giving this site permission to store it and show it on your page. Nothing more than that.
What happens if you break those
A page can be taken down and an account can be suspended. A suspended profile stops being served and returns the same page as a name nobody has registered.
For anything unlawful, or anything involving a child, there is no warning and no appeal, and it is reported.
What this site stores
Your email address, a hash of your password, whatever you put on your profile, and a count of how many times your page has been loaded.
Not your IP address, not your location, not your browser, and no record of an individual visit. The view counter is an integer that goes up. There is no table of visitors behind it, so there is nothing to hand over, leak, or be asked for.
Your password is stored as a PBKDF2 hash with a random salt, never in a form anybody can read, including whoever runs this site.
Rate limiting has to tell one client from another, so it uses a salted hash of the address that expires within minutes. The address itself is never written down.
Deleting things
You can remove anything you have added to your page at any time. Ask and the account goes with everything on it.
An account that never verifies its email is deleted within a day, and its username goes back into circulation.
What is not promised
This is free and it is run by one person. It may be down. Something may break. A feature may change or go away. Keep your own copy of anything you would be upset to lose.
Live Discord status has ten slots because that is what the free tier pays for. Holding one is first come, first served, and is not guaranteed to anybody.
You have to be 13 or over
Signing up requires confirming that you are at least 13. That is the floor this site sets and it is not negotiable: services that let under-13s create public profiles take on obligations, in the US under COPPA and in the UK and EU under the equivalent rules, that a site of this size cannot meet responsibly.
If your country sets a higher age of digital consent than 13, that higher age is the one that applies to you. In parts of the EU it is 16.
The check is a declaration, not a verification. This site does not ask for documents or scan anybody's face, because holding that kind of data would be a far larger risk to you than the problem it solves. If an account is found to belong to somebody under the floor, it is removed along with everything on it.
Who else sees anything
Cloudflare serves this site and holds its database, so they process what is stored. Resend sends the verification code, so they see the address it goes to. Those two are unavoidable and they are the whole list.
Fonts are the case worth explaining. A profile can use any of 1,825 Google Fonts, but your browser never contacts Google: the stylesheet and the font files are fetched by this site and served from it. Google sees Cloudflare asking for a font. It does not see you, your address, or which profile you were reading.
There is no analytics script, no advertising, no tracking pixel and no third-party embed anywhere on a profile page.
If you connect it
Connecting Discord is optional and everything works without it. If you do, this site stores your Discord id, handle and avatar hash, and asks Discord to add you to the server so the bot can see your status.
Only your status word is read, and only while you have the switch on: online, idle, do not disturb, or offline. Not what you are playing, not what you are listening to, not anything you have said. Turn the switch off and the bot stops reading you at all.
One Discord account can be connected to one profile. Wearing somebody else's is not possible, because the connection is made through Discord's own authorisation rather than by typing an id.
Your name and your page
A username is yours while your account exists. It is not property, it cannot be sold, and a request to transfer one between accounts will be refused.
Names that impersonate this site or its staff are held back and cannot be registered. A handful of others are held back because they are already pages here.
If an account is deleted its username returns to circulation, and somebody else may take it. Nothing about a deleted profile is kept or restorable.
When these change
Anything that changes what you agreed to is written in the changelog with a date on it, on the same day it ships. There are no silent edits to this page.
Continuing to use the site after a change is how the new version is accepted. If you do not accept it, delete the account; nothing is held back on the way out.
Reporting something
If a page on this site breaks these rules, say so in the Discord server. Include the address of the page. Anything involving a child is acted on immediately.