Privacy

Note
TLDR; no ads, no trackers, no analytics companies and no cookies for visitors. Just lurking stores nothing about you once you close the tab. Things are only kept when you do something that needs them (chat, rate a post, score points, change a setting), and the Forget me button below wipes them.

Who runs this site#

Me, Matthew (MattFor), a private person in Poland. This is a personal, non-commercial site. For anything about your data, email me at mattfor@relaxy.xyz. Under the GDPR I'm the controller of the personal data described here.

When you visit#

Your browser connects to my server, a Raspberry Pi of my own, so the server sees your IP address and what browser you use. That's how the web works :P

Server logs are kept for 14 days so I can keep the site working and safe. IP addresses are never written down as they are: only a shortened, keyed hash of them.
Visit counts. To count how many different people visit each day, the server mixes your IP address and browser into a hash with a secret that changes every day, so nobody can follow you from one day to the next, and nothing is stored in your browser for it. What's kept is totals: page views per page, visitors per day, mobile or desktop, and which websites linked here (only their name). The daily numbers are kept for 120 days; the all-time ones are just counts.

Legal basis: my legitimate interest in running a working, secure site and knowing roughly how it's used, in a way that can't identify you (Art. 6(1)(f) GDPR).

The live parts#

While a page is open, your browser keeps a live connection to the pod so it can be shared:

Ghost cursors and who's here. Other visitors on the same page see your pointer with a random name and colour, and the chat shows who's around. Positions aren't stored anywhere. Switch Cursors off in the popit and yours is no longer shared.
Chat. Your messages, the name you pick and the time are shown to everyone and kept for up to 90 days (only the newest 300). With each message the server keeps a random id for your browser and a keyed hash of your IP address, so I can deal with abuse (delete messages, mute someone). Chat lines also appear in the server logs (14 days). Please don't post anything personal: it's a public room.
Leaderboard. If you score points (popping bubbles, beating the Cakeling), your name, colour and points are kept under a hashed form of your browser's id and shown on the leaderboard. Entries are removed after two years without playing, or straight away with Forget me.
Yay! and Boo! One vote per browser per post, kept under a hashed form of your browser's id while the post is up. To stop vote-stuffing, a keyed hash of your IP address is held in memory (never on disk) for the day.
Mutes. If someone is muted in the chat, their browser id and a keyed hash of their IP address are kept until the mute ends.

Legal basis: providing the features you choose to use, and keeping them free of abuse (Art. 6(1)(f) GDPR).

In your browser#

This site sets no cookies for visitors (there's one for me, to sign in to Create mode). It uses your browser's own storage, and only like this:

Just looking: a random id, name and colour for the live connection, in session storage, which your browser empties when you close the tab.
Once you do something that needs remembering, it's kept on your device: your settings when you change them (sound, music, motion, focus, cursors, backgrounds, weather), your score and sticker album when you collect something, your id, name and colour once you chat, rate or score (so your place on the leaderboard and your votes stay yours), the scoreboard's all-time numbers once you switch it to them, and the little things you arrange (the sticker pad, the shrine's candles).

Nothing in there is sent anywhere except your id, name and colour over the live connection. This storage is only used for things you asked for, so it doesn't need a consent banner (Art. 5(3) of the ePrivacy Directive). You can clear it any time in your browser, or with Forget me.

Things from elsewhere#

Fonts, pictures, sounds and scripts all come from this site. No CDNs, no Google Fonts.
YouTube videos in posts aren't loaded until you press their play button. Then the video comes from YouTube (Google Ireland Ltd, with Google LLC in the US) in its privacy-enhanced mode, and Google receives your IP address and may store things in your browser, under Google's privacy policy. Pressing play is your consent to that for that video (Art. 6(1)(a) GDPR); you can also watch it on YouTube instead.
"Now listening" and my Discord status come from my own Discord presence, fetched by my server through Lanyard. Your browser never talks to Discord or Lanyard, and album covers are passed on by my server.
Links to other sites (GitHub, Codeberg, Ko-fi, Steam, Discord, and so on) only take you there when you click them, and those sites have their own privacy policies.

Who else gets your data#

Nobody. Nothing is sold, shared, or used for ads or profiling, and no decisions are made about you automatically. Everything is stored on my own server, in the EU. The only data that leaves it is a YouTube video's request to Google, and only when you press play.

Your rights#

You can ask me for a copy of your data, to correct or delete it, to restrict or object to its use, or to have it in a portable form, and you can take back your consent for YouTube at any time. Just email me. Since I mostly hold only hashes and a random browser id, I may need that id to find your data; Forget me does the usual case instantly. You can also complain to a data protection authority: in Poland that's the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warszawa), or the one where you live or work.

Forget me#

This deletes your place on the leaderboard, your Yays and Boos, and everything you said in the chat from this browser, then clears everything this site kept in your browser (settings, sticker album and score included). It can't be undone.

Changes#

If any of this changes, this page will say so. Last updated 5 October 2026.