Privacy, in plain words

Most privacy pages promise not to misuse what a site collects. This one is shorter: we do not collect. Check any claim below yourself — open your browser's developer tools and look.

What we never have

No accounts. No cookies. No analytics, pixels, or fingerprinting. No database. No server that receives your letters. No email list. Your letters are signed with a throwaway key that is destroyed — overwritten with zeros — when you leave or when the take-back window closes.

Where a letter actually goes

When you release a letter, it is broadcast over public transmit-only relay channels (the kind that, by protocol, are not stored) to the browsers currently watching the sky. It carries an expiry, and every sky discards it at that moment. Honest limit: a long candle only stays lit in skies that stay open, and public relays are infrastructure we use but do not control — which is why the rule of this place is to never put a name or anything identifying in a letter.

What stays on your device only

Your comfort settings (text size, dyslexia font, still mode, and similar) are kept in your own browser's local storage so the room looks the same next visit. They contain no identifier and are never transmitted. Your browser's language setting is read — never stored, never sent — to pre-sort the lifeline list and pre-highlight a language.

The vault is different, on purpose

The few works in the vault are permanent — each one placed by hand, with its owner's explicit yes, and nothing else ever joins them automatically.

Text to speech

The read-aloud voice is your device's own. Nothing you hear read was sent anywhere.