Your data
belong to you.

Updated October 5, 2026

No ad trackers. No account required. Private writing stays on your device.

Operational diagnostics

DevPause records coarse page and feature events, browser error counts, and available loading or interaction timing. Events exclude private writing, pass keys, email addresses, and captured images. They are aggregated by route and feature; they are not linked to your anonymous session identity. Native Cloudflare logs and traces support reliability and payment troubleshooting. Query strings are redacted.

Aggregates in our operations store are retained for 30 days. Cloudflare’s native Analytics Engine retains coarse event points for 3 months; logs and traces follow its platform and account retention settings. The browser’s Do Not Track preference disables optional client events. A local last-visit timestamp can count a return to this browser without sending a visitor identifier.

On your device

DevPause stores your intentions, reflections, studio preferences, saved compositions, and session metadata in browser storage. Captured moment images are kept in the browser’s local image database. This information is not uploaded as part of a session. It is available only in the browser where you created it, unless you download and move a private backup yourself.

Clearing browser storage removes that local information. Your session log includes a private metadata backup and individual image downloads. Sharing a moment leaves your intention and reflection out of the shared text. Composition links contain form settings and camera pose, without private writing.

Your journey, music, and optional AI

Your journey checkpoint and musical seed stay in this browser. The score is composed on your device. Browser AI, where available and enabled, also runs on your device. The local command guide uses rules and sends no description to the server.

If you choose Cloudflare AI, submitting sends your description and scene settings to Cloudflare for inference. DevPause does not store descriptions or model responses. Daily request counters limit usage. A daily salted IP hash helps enforce a shared network budget; it is removed with other counters within three days. Cloudflare processes the request under its service data terms. Returning to the local guide stops future cloud submissions.

The tab title and optional floating view show your session or journey status. Sound can continue while you switch tabs. The main visual rendering pauses in a hidden tab, and resumes when you return. Your browser and device control background playback availability.

Your home, shared journeys, and recordings

Your personal home stores object recipes, names, and positions on this device and under your anonymous browser identity in D1. An offline action queue retries synchronization when connected. Completing a saved session can add a garden seed once. Home backups include your home name and object arrangement; they exclude journal writing.

A shared journey uses a private invitation for up to two visitors. The server coordinates the path, object actions, music controls, and pointer presence in a Cloudflare Durable Object. Invitations expire after six hours; connection tickets are short-lived and single-use. Your home and journal are not included in shared-room state.

Audio and films are recorded from the generated sound and scene canvas without microphone or camera access. Recordings remain in browser memory until you download them or leave the experience. Discovery links contain a bounded scene recipe and mixer settings. Anyone with a link can replay those settings, so share only discoveries you intend to make accessible.

Your anonymous browser identity

A signed, essential session cookie identifies the browser to the server. It lasts up to 180 days. It lets the server save session times and verify World Pass access without creating a named account. It is not used for advertising or cross-site tracking.

The server stores session mode, selected world, duration, timing state, and completed session totals. Session records are retained for up to two years; cumulative totals remain until you reset them. Unfinished sessions left open for seven days are closed automatically.

World Pass purchases

Stripe handles real payments on its hosted checkout page. DevPause does not receive or store your card number. Stripe may collect billing information and an email for its payment and receipt services. See Stripe’s privacy policy for its handling of that information.

DevPause stores an order reference, payment references, price, currency, payment status, and a hash of the private pass key. A pass key can restore access on up to 5 browsers. Purchase records may be retained for refunds, financial recordkeeping, and verification of paid access.

Messages you send us

The feedback form saves your message, its category, and an optional email or order reference. These records are retained for up to 180 days. An email is used to respond to the message, not to add you to a marketing list. Please keep private pass keys and card information out of your message.

Hosting and essential processing

Cloudflare hosts the site, serves its assets, and stores the server records. Like other web infrastructure, it processes request information, including IP addresses, to deliver and protect the service. The application uses an IP-based request limiter; it does not add IP addresses to the session or journal tables. Error logs contain a route and error name, rather than your private writing or payment secrets.

Fonts and the visual worlds are served by DevPause. Sound is generated on your device. No third-party analytics scripts are loaded by the site.

Resetting your browser data

You can remove this browser’s server session history, cumulative totals, and feedback messages, unlink its pass access, and clear local journal data and saved compositions. Financial order records are detached from this browser identity and retained separately. Keep your pass key and any private backups before resetting.

Questions about your information

Use the support form to ask about your information, a purchase, or a pass. Include an email if you need a reply.