Your privacy, plainly

What this site never does

• No accounts and nothing to sign up for.
• No cookies.
• No third-party scripts, fonts, trackers, or advertising of any kind. Every file you load comes from this domain.
• No selling or sharing of anything about your visit with anyone.

What stays on your device

• Your theme choice. If you pick light or dark mode, that preference is saved in your browser's local storage. It never leaves your device.
• A small puzzle token. The contact page and the 3D experiences ask your browser to solve a tiny proof-of-work puzzle that deters spam robots. The solved token is kept in your browser's session storage and expires on its own. It is the one item on this list that does travel: it rides along with the usage pings described below, so that one visit's pings can be grouped together, and a short piece of it becomes the reference in the subject line if you email us from the contact page.
• Your progress inside an experience, while the tab is open. Each 3D experience remembers your discovery checklist progress and whether you have already seen its little celebration messages. That lives in your browser's session storage and is cleared when the tab closes.
• A few things that are meant to outlast the visit. Where an experience would be poorer for forgetting, it saves to your browser's local storage instead, so it is still there when you come back. The Fractal Garden saves your garden: which trees you planted, where you planted them, and how they are getting on. The garden has a Start a new garden button that clears its save on the spot. Earth Defense saves your best score along with your sound and control settings.
• Your game of X's and O's. X's and O's saves your best score in your browser's local storage, along with the last play you called, the defense you chose to face, the player your avatar plays as if you chose one other than the quarterback, the colors and stripes you chose for the teams' uniforms and the color you chose for the field, whether you turned the sound on or off, and whether you turned on Auto jump, so the game comes back the way you left it. It also keeps a game you have not finished, which is the play number, the running score, and one line for each play so far, so closing the tab halfway through does not cost you the whole game. That one is cleared as soon as the game ends, and the Start over button in the playbook clears it on the spot. A video clip or a photo of a play is made right on your device and handed only to your own share sheet or downloads folder. Neither is ever sent to us.
• Your job search in Corner Office. Corner Office keeps everything you enter, your applications, interviews, contacts and follow-ups, along with your settings and which things in the office you have already opened, in your browser's local storage, so your office is just as you left it when you come back. None of it is ever sent anywhere: its usage pings say only what kind of thing you did, such as adding an application, and never anything you typed. Its Share my week button makes a picture of your week right on your device, with just how many applications you sent each week and your weekly goal, never a company or a role, and hands it only to your own share sheet or downloads folder. Its Out-tray saves a backup you can keep, and its Settings can clear the office on the spot.
• Your best time in Leaf Blower. When you clear the whole lawn before the clock runs out, the leaf blower game keeps your fastest time, just the number of seconds, in your browser's local storage, so you have a time to beat. The Forget my best time button on the welcome card clears it on the spot. The person on leaf duty is your avatar, described below. A character chosen on the game's own card before October 26, 2026 is moved into your avatar the next time the game opens, and the old record is removed.
• Your avatar. When you save an avatar on the Your Avatar page, its choices are kept in your browser's local storage: its face, eyes, expression, hair, build, clothes and shoes, each one picked from a short list or, for a color, from your browser's color picker. The one thing you can type is a name for the back of a sports jersey, if you want one there, and it is kept the same way, with the avatar. Beside them is a small picture of its face, drawn right on your device. Nothing about your avatar is ever sent to us, and it is never in our usage pings. The page's pings, described below, count only what kind of thing was done, such as a save or a change to the hair, and never what was chosen. A link or a file you make to move it to another device holds only those choices, a jersey's name among them, and the part of the link that holds them is never sent to our server. A picture or a short video you export of your avatar is made right on your device and handed only to your own share sheet or downloads folder. The Forget my avatar button on that page clears it on the spot.
• Your cars in Derby Day. Derby Day saves your cars in your browser's local storage, up to four of them, so they are waiting on the workbench when you come back: each car's name, number, shape, paint, decals, weights and axle work, its best result in each race, your last race, the trophies you have won, how you dressed your family on the family card, whether you chose metric units or turned the sound on, and the first name you last put on a challenge, if you typed one. A challenge link holds the car you send and that name, nothing else. It is made on your device, and the part of the link that holds them is never sent to our server, by you or by the friend who opens it. The Forget my cars button in the workbench's settings clears all of it on the spot.
• Your home in Whitestone Home Care. The Whitestone demo keeps the home you build in your browser's local storage, so it is waiting for you when you come back: the kind of home, its floors and rooms, the tasks you chose with their options, stars, and notes, your care preferences, and where you are in Maya's steps. Photos you add to a task are resized and stripped of their location before they are saved, in your browser's own database. There is no Whitestone server, so a checklist you book is kept only in this same browser too, sealed so that it opens only with its link and PIN. If you open a shared checklist on its cleaner's page, that page keeps the checklist's key, a pass that lasts for the visit, the visit's marks and add-ons, and a sealed copy for the hours of the visit, along with any photos taken as proof of the work, for up to 30 days. It also keeps a copy of its own page files so that it can reopen without a connection. Maya's Start over link clears everything the demo keeps on the spot, once you confirm it.
• Your last meme in Meme Studio. Meme Studio keeps the meme you are making in your browser's local storage, so it is just as you left it when you come back: which meme you picked, your captions, the face chosen for each panel, and the avatar of a friend in it, whether you added them from their link or file or they sent you the meme, along with anyone you dressed yourself with Customize. Your own avatar is read from where the Your Avatar page keeps it, never copied. None of it is ever sent to us. The page's usage pings say only which meme you picked and what kind of thing you did, such as saving a picture, and never anything you typed. A picture you make of your meme is made right on your device and handed only to your own share sheet or downloads folder. A link you share holds the meme, your captions, your avatar and the looks of the other people you put in it, in the part of the link that is never sent to our server, by you or by the friend who opens it. The Start over button clears your meme on the spot.
• You can remove any of it whenever you like. Apart from that puzzle token, everything above stays on your device and is never sent to us or to anyone else. Clearing this site's data in your browser settings removes all of it at once.

What the web server keeps

Each time your browser asks this site for something, the web server writes a short line to its log, the way nearly every website does. That line includes your IP address, the time, the address of what was asked for, the page that sent you here, and the brief description your browser gives of itself, such as its name, its version, and your operating system. We use these logs only to keep the site running and secure, for example to track down a fault or turn away an attack. They are never sold or shared, never used to build a picture of who you are, and are deleted automatically within a year.

Anonymous usage pings

As visitors explore the 3D experiences, the pages send simple pings to this same domain, such as "someone found the waterfall." Each ping names the experience it came from and carries your browser's language setting, a note of whether you are on a phone or a computer, and the puzzle token that groups one visit's pings together. The pings land in a separate log of their own, which never records your IP address or the description your browser gives of itself.

The pings are gathered into a public summary for each day, which anyone can read, and which Steve's office displays inside the world itself as a little visitor dashboard. Each visit appears under a throwaway label, such as "Curious Otter," as a timeline of its pings and the time each one arrived, along with its language setting and whether it came from a phone or a computer. The puzzle token stays private, and the summary carries no names, no IP addresses, and no browser fingerprints. Because each visit's pings are listed with their times, someone who already knew exactly when you visited could recognize your visit in the summary.

X's and O's notes a little more, because the game is the plays. Each time you call a play, snap the ball, or throw it, and each time a play ends, it records the play and the defense, the receiver you picked, how it turned out and what it was worth, along with your running score, whether the sound was on, and whether your screen was held upright or sideways. When you share a play, it notes only that a clip or a picture was made, shared or saved, how many seconds the clip ran and which of the four views it was from. The clip itself never leaves your device. These notes appear in the public summary along with the rest of the visit. It never records the size of your screen or anything else that could pick your device out from anyone else's.

Whitestone Home Care sends a ping for each button you press, saying only which one and where, such as adding a kitchen from Maya's suggestions, along with whether a demo booking went through and whether a cleaner's PIN opened the checklist. It never sends anything you typed, a price, a date or time, or the PIN itself.

If you email us

Your message and address are used only to reply to you. That is the whole story.

Questions

If anything here gives you pause, please reach out. We are happy to explain anything in more detail.

Last updated October 31, 2026.