← back to NothingBox
Privacy · Plain English
How your privacy
actually works.
Not the legal version. The honest version. What happens to your words, your photos, your voice, and your feelings — step by step, feature by feature.
🔥
Burn letter
What you write before it burns
1
You type your letter
The text lives in your browser's memory only. Nothing is sent to our server while you type.
2
You tap burn
The animation runs entirely in your browser. At no point does your text travel over the internet.
3
The burn completes
The text is cleared from browser memory. It is gone. We have no copy. There is no copy anywhere.
4
What we do log
One anonymous event: "a burn was completed." No content. No timestamp linked to you. Just a count.
✓ Your words never leave your device
📷
Photo burn
Uploading a photo to burn
1
You choose a photo
Your device creates a temporary in-memory reference (a "blob URL"). The photo data never leaves your device.
2
The photo displays on screen
Shown directly from device memory. Zero network requests. Open your browser's network inspector — you'll see nothing.
3
The burn completes
We call URL.revokeObjectURL() — the technical instruction that permanently frees the memory reference. The photo ceases to exist in the browser.
4
What we do log
Nothing about the photo. Not its name, not its size, not its contents. An anonymous "burn completed" event only.
✓ Photo never uploaded. Ever.
🎙
Voice memos
Your recorded voice
1
You record a memo
Captured using your device microphone. Stored immediately in IndexedDB — your browser's private local storage.
2
It stays on your device
IndexedDB cannot be read by other websites or apps. It is private to NothingBox on your device only.
3
If you share or download it
You choose where it goes via the Web Share API. NB does not receive a copy. You're sharing from your device directly.
4
If you clear browser data
Your memos will be deleted. This is the only risk. Export important memos before clearing.
◎ Device only · Export before clearing
🖼
Moments gallery
Your saved photos
1
You add a photo
Compressed to under 300KB and stored in IndexedDB on your device. Never uploaded to our servers.
2
It lives on your device only
The same IndexedDB storage as voice memos. Private, local, inaccessible to anyone else.
3
What we log
Anonymous events only: "moment added", "moment viewed." No photo content. No metadata.
◎ Device only · Max 10 photos
🪞
The mirror
Your front camera as a mirror
1
Camera opens as a live preview
Uses your device camera via the browser's getUserMedia API. A live video stream — nothing else.
2
No photo is ever taken
NB never calls canvas.toDataURL() or captureStream(). No frame is ever captured, encoded, or stored.
3
You tap a mood chip
Camera stream stops immediately. The mood you selected is logged anonymously. That's all.
4
No face analysis. Ever.
NB does not use any emotion recognition, facial analysis, or computer vision on your camera feed. We see nothing. We process nothing.
✓ No photo taken · No face analysis
🔍
Name It flow
Where AI is involved
1
You answer 4 questions
Your answers (which option you selected, not free text) are sent to our server to generate one witnessing sentence.
2
Our server calls Claude AI
We send your 4 answers to Anthropic's Claude Haiku API. Anthropic processes this per their privacy policy and does not retain your data.
3
One sentence comes back
"It sounds like you're carrying something heavy right now." That's the response. We do not store your answers after this call completes.
4
If AI is unavailable
A static, pre-written sentence appears. NB never shows an error. The fallback is carefully written and always appropriate.
→ Your answers reach our server · Not stored after
The complete picture
What Stored on server? Stored on device? Sent to anyone?
Burn letter text Never Never Never
Photos (burn) Never Never Never
Photos (Moments) Never Your device only Never
Voice memos Never Your device only Never
Camera (mirror) Never Never captured Never
Name It answers Not after processing No To Claude AI only
Mood selections Anonymous only localStorage Never identified
Exercise ratings Anonymous only No Never
Your email If signed in only If signed in Never sold/shared
Our commitments
✓ We will never add advertising tracking (Google Analytics, Facebook Pixel, etc.)
✓ We will never sell your data. To anyone. Ever.
✓ We will never store the content of what you write or say.
✓ We will tell you if this ever changes before it changes.
✗ We will never use your emotional data to target you with anything.
✗ We will never share your mood history with insurers, employers, or anyone else.
Read the full legal privacy policy →
← back to NothingBox