Privacy

The short version

No accounts, no ads, no selling data. Only three things leave your browser: the life you chose to submit, the one line you wrote, and a hash of your email if you pay.

1. What leaves your device

• The life you submit after finishing a run: country, sex, starting age, age at death, cause, and the generated name. Not your real name.
• The message you write in the gallery (up to 60 characters), and the number of candles.

2. What stays on your device

• Your language and light or dark choice.
• Every run you have walked (saved locally), and your cause codex progress.
• These live in browser localStorage and are never uploaded. Clearing browser data erases them.

3. How we use it

Only to show that life in the gallery, count candles and display messages. No ads, no profiling, never sold. Feedback never touches the server — it becomes an email, and your address only exists inside that email. No account needed.

4. How long we keep it

The gallery keeps at most 400 lives; the oldest are removed first. Messages stay with their life. You can write in at any time to have yours deleted, and we will handle it within a week.

5. Minors

This simulation is for ages 15 and up. Under 15, use it with a parent or guardian, and do not post messages.

6. Payment and email

When you buy a keepsake, payment is handled by a licensed Merchant of Record; we never see your card number. So you can recover a purchase on another device, we store a SHA-256 hash of the payment email — not the address itself. That hash is used only to match an email to the lives it bought; it is never used for advertising and never joined to other data. You can write in at any time to have it deleted. Receipts and payment records are held by the payment provider for refunds and reconciliation.

7. Contact

For anything privacy related, use the Feedback and mark it Privacy.