PRIVACY POLICY
Last updated: October 2026. This page describes what this website actually does.
WHAT WE COLLECT WHEN YOU CLAIM A WINDOW
- What you chose: the name you typed (optional), tonight's mood, your companion's look, and your line. All of it is public on your window. That's the point.
- A line in your own words: if you write one, it is read automatically by a model at Cloudflare before it goes up, and only the line itself is kept.
- Your country: a two-letter code (like "br") detected from your connection by Cloudflare. We never ask for or store a precise location.
- Your window key: we store only its SHA-256 hash. We cannot recover a lost key. Nobody can.
WHAT LIVES IN YOUR BROWSER
Your window key, your invite links, your sound preference, a first-visit date, a marker that decides whether this browser's visits are included in our counts, and whether we already offered you the home screen and notifications. It stays on your device. Clearing site data removes it, so keep your key copied somewhere safe first.
ANALYTICS
We count events, not people. Nothing we count carries an IP address or a visitor ID, and no per-person profile is built from it.
Cloudflare counts page views for us as well: which page opened, where the visit came from, and how fast it loaded. Nothing in that carries an identifier either.
GUESS MY WINDOW
A Guess my window game gives each connection three guesses. To count them the server stores a one-way hash, never the raw address, and it is deleted with the game.
BOT PROTECTION AND HOSTING
Claims are protected by Cloudflare Turnstile, which normally checks in the background and only asks for interaction when needed. Turnstile processes that check under Cloudflare's privacy policy.
Rate limiting is the one place an IP address is written down at all: when a window is claimed, the address goes into a short list whose only job is to stop a single connection taking dozens of windows. It is deleted within about 2 days, it is never joined to your window, and it never reaches the counters above.
The entire site runs on Cloudflare (hosting, database, network). Cloudflare has to see requests in order to serve them, like any host.
NOTIFICATIONS
Off unless you turn them on yourself.
Turning them on stores what your browser gives us: a delivery address it issued, and two keys the message is encrypted for. No name, no email, no device identifier. Turn them off from the switch at the foot of your sill, or in your browser's settings, and the record is deleted.
HOW LONG THINGS ARE KEPT
- Your window and what's on it: until you ask us to delete it, it is removed for abuse, or it is reclaimed under the inactive-window policy below.
- Nightly lighting history: about 7 days.
- Aggregate mood counters and anonymous analytics counters: about 90 days.
- Cloudflare's page-view counts: kept by Cloudflare, not by us.
- Rate-limit IP log: about 2 days.
- Expired friend invitations and Guess my window games: about 7 days.
INACTIVE WINDOWS
If you are inactive and do not light your window for more than 90 days, we may, at our discretion, turn it off and make it available for someone else to reserve. This is a possibility, not an automatic or mandatory action. We reserve the right to decide how to manage abandoned windows.
WHAT WE NEVER DO
We do not sell your data, and we do not share it with anyone outside the services named on this page.
CONTACT
Questions about privacy, or want your window removed? Contact: info@buildonia.com. Removing your window deletes its row and its lighting history.