A private space needs clear boundaries.

This page describes the current alpha. It does not claim that the service is anonymous or end-to-end encrypted.

What is saved

For accounts, your username, email, invitation admission, password hash, and sign-in sessions are saved. Guest sessions use a temporary browser identifier. Your reading profile, partner connection, and reading progress are saved. Suggested-moment responses, personal text selections, optional notes and reflections, sharing choices, and interpretation reviews are saved with their reading. New readings also save the story version so selected passages keep their meaning. We use essential account, guest session, and age-confirmation cookies. Age confirmation lasts up to 24 hours; we do not request your date of birth. The application does not include advertising or analytics scripts.

Who can see your answers

In new readings on two connected devices, your partner sees only the ratings, selected passages, notes, and reflections you choose to include in joint results, after both people finish. You can change those sharing choices later. Older readings retain their original agreement to share ratings and notes after completion. On one shared phone, anyone using that browser can access both people’s responses. Each moment displays a separate, named rating row for each person.

The owner’s administration page shows invitations and admitted email addresses. It does not display private profiles or reading notes.

How information is protected

Profiles, names attached to readings, preference snapshots, story versions, responses, notes, reflections, and interpretation reviews are encrypted before database storage. The server holds the decryption key so it can provide the reading and results experience. This is encryption at rest, not end-to-end encryption. Hosted connections require HTTPS.

The hosting, database, and email services process information needed to run the app. Email delivery includes your address and password-reset or account-recovery link. Passwords are stored as salted hashes. Hosting services may retain operational access logs under their own settings.

Keeping and deleting data

Guest access expires after 24 hours. Guest profiles and unsaved readings are removed by scheduled cleanup. Free accounts can access completed results for 24 hours; each Plus account keeps access for 30 days from completion. Contributions you chose to share remain in a paid participant’s saved reading after the other person’s access expires. One person’s Plus access does not extend their partner’s history. Expiration is enforced on reading pages, direct requests, and exports before scheduled cleanup physically removes the data. Stop deletes unfinished responses, reflections, and interpretation reviews immediately. Private contributions are purged when you remove completed results, or by cleanup after your access expires. Removing completed results from your history leaves your partner’s own access intact. Disconnecting stops unfinished readings and keeps completed results. Deleting your account removes the readings you participated in, including shared responses. Expired results cannot be restored by signing up or getting Plus.

Account profiles and login information remain until account deletion. Guest sessions can be ended from You. You can download your own profile, responses, reflections, and interpretation reviews from your account settings. Backups managed by a hosting provider may retain deleted data until their configured retention period ends.

How results are produced

Results use your ratings and meanings you explicitly select. Your private reading responses and notes are not sent to an external language model. A result is an observation about a reading, not a psychological assessment or permission to act.

Your choice

Take part only if you are 18 or older and comfortable with these arrangements. Use a nickname, leave optional notes empty, and stop whenever you want. For alpha privacy questions, contact the person who invited you.