Privacy
Privacy
Policy version 2026-10-26.1
What we store
- Account: a random account ID, an optional display name, language, time zone, chosen fictional scenario and display settings. No email, birth date, address, ID document, photo or biometric data.
- Passkeys: the public key and an ID for each passkey. Your device keeps the private key; your fingerprint or face never leaves it.
- Recovery codes and session cookies: stored only as SHA-256 hashes.
- Demo answers: rankings, token pools, performance ratings, opinions with the question version, and research notes.
- Consent records: purpose, scope, policy version, grant or withdrawal, and time.
- Shared links: exactly the card content you previewed and published.
- Security log: sign-in, passkey and session events, never your answers.
What your answers are, and are not
Stored opinions are protected account data. They are not anonymous and not invisible to every operator: they are kept in a database that a small number of administrators can technically access, and access is restricted for that reason. Data is encrypted at rest by our infrastructure provider (Cloudflare); that is not anonymity. Answers are never sold, never sent to advertising or social networks, never sent to AI providers, and never combined with the simulated community numbers.
Cookies and local storage
One essential session cookie, set only after you start a guest session or sign in. Your light or dark display choice is kept in this browser's local storage only. No analytics, advertising pixels, session replay or third-party scripts.
Retention
Guest sessions expire after 7 days. Account sessions expire after 30 days. Account data stays until you delete it. Deletion removes it from the live database immediately; the database provider's point-in-time recovery may keep it for up to 30 days in backups we do not routinely access.
Sharing
Publishing a link makes that card public to anyone with the link. Revoking stops this site serving it; we cannot delete copies other people made.
Your controls
On Account: export everything as JSON, withdraw "Save preferences" (which deletes saved work), revoke links, and delete everything. On Security: see and end sessions.
Research
There is no research program. Nothing you do here is used for research or public statistics.