Privacy · what the code does today
Your world stays yours.
Exploring the lab and lending compute are different choices. The island runner starts only when you press Join.
Everything runs on your device
The lab computes the world in your browser. Copies you save are written to this site’s private browser storage. Download writes a file to your own device; Open a file reads one you choose. Clearing site data may remove saved copies.
There is no account and nothing asking for your email. The one typeface is served from this site, not from a font network.
What gets counted
Visits are counted with Plausible Community Edition, run on the project’s own server. The counting code ships inside this site’s own files rather than loading from another company, and the counts go only to that server. It sets no cookies and keeps nothing on your device. Each visit records the page, where you came from, how long the page was in front of you, how far you scrolled, and your browser, system and rough location. Of a link’s own details, only where the visit came from is kept; a world or seed named in it never leaves your device. It uses your IP address to estimate that rough location and, with a key it deletes every day, to tell one day’s visits apart; it does not store the address. It cannot follow you from one day or one site to the next.
In the lab it also counts a handful of actions: planting a new world, pressing Play or Pause, saving a copy, downloading one, restoring a saved copy, and opening a file. Each is recorded as that action alone, with the catalogue name of the starting world it happened in, or just “imported” for a world that came from a file. It never receives your worlds, the contents of a saved copy or file, a file’s name, a seed, or anything you type.
What the island sends
When you press Join on the island page, the browser connects to the coordinator, receives work, and uploads simulation results. It sends a browser user-agent string and GPU adapter description. The coordinator records an island ID, timestamps, run counts, verification counts, and uploaded run artifacts. A temporary bearer credential is kept in this tab’s session storage to recover from a reload.
Close the tab or press Stop to stop new work. Uploaded results remain on the coordinator; this project currently has no automatic retention or self-service deletion feature. The public status page shows only aggregate counts.
What a letter would carry
The shared garden is not open yet; its page is being tried out and nothing on this site links to it. When it opens, a letter to it is public from the moment it is sent and carries only a place and a size: no name, no text, nothing about you. To keep the limit of a few letters an hour, the coordinator itself holds a salted hash of your network address in its memory for the hour it counts, clears it within a minute after that hour ends, and never writes it to disk.
The garden page keeps a small record in this browser’s own storage, to say what changed since your last visit: which planting of the garden you saw, the step it had reached and the garden’s time then, how many days had been replayed, and the ids of the letters sent from this browser. None of it is sent anywhere; clearing site data removes it.
Contact and changes
This page describes the current code, not a promise that it will never change. Check the source history for updates or raise a privacy question in the project’s issue tracker.
Open the issue tracker ↗