Your words belong to you.
Write & release and Shred it
Text stays in the current page’s memory. Releasing clears it before the animation begins. Leaving or reloading the page also clears it. We don’t upload, save or analyze that text.
Your local journal
Only saving an entry writes it to this browser’s local storage. Entries are not encrypted; someone sharing the browser may see them. You can edit, export, import and delete entries. Clearing browser data can remove saved entries. Unsaved journal drafts stay in memory during navigation and disappear on reload.
Favorites, mixes and appearance
Guest favorites, quick starts, saved sound mixes and your guest theme use browser storage. Recent activity is off by default; when enabled, only the last six public non-writing activity links stay on this device. No words, writing-page visits, journey progress or timestamps are collected. Disable it to clear this list. These device choices may be visible to others using the same browser, and do not sync to your account. Signing in syncs only favorite activity links, appearance and movement settings to Platform Core. No ad tracking or AI processing is enabled. A download of your artwork saves only the canvas image.
Your encrypted private journal
This is a separate, opt-in space from browser-only writing. Its passphrase and key stay in page memory. AES-GCM encryption happens on your device; only ciphertext, a random salt, an IV, revision and update metadata are stored in a separate Vault service. Your account identity controls access to its encrypted envelope. The journal locks on hiding/leaving the page or after five minutes idle. We cannot recover a lost journal passphrase. Web encryption relies on the delivered site code and your device; it does not protect against a compromised browser or server changing the app.
Accounts and deletion
Accounts use usernames, password hashes and server-side sessions. Recovery codes reset account passwords, not journal encryption. You can export preferences, sign out other sessions, change your password and delete your account. Deletion removes active account and Vault records; operational backups, where retained, may hold deleted encrypted records until rotated. No email recovery or identity verification is provided in this test.
Installable app
The optional PWA caches the public shell and game assets only. Account, preferences and Vault API replies are never cached. Private pages remain online-only. HTTP and HTTPS browser storage are separate; moving an old journal requires your explicit export/import.
Sounds and hosting
Audio loads from this site when you press Play and stops when you leave the sound page. Recording credits appear in the player. Ordinary hosting access logs can include an IP address and requested URL, but no private writing is sent.
Your choices
Use this space without saving anything. Choose a shared device carefully, export journal backups if needed, and use the journal’s deletion controls to remove saved entries. Privacy features here do not claim device-level secrecy or medical confidentiality.