Back to Vague-Presence

Privacy

Last updated 24 August 2026

What the apps store

Every app on the bench runs in your browser. Your files, projects and settings are written to local browser storage or to a folder you explicitly grant access to. None of that content reaches a Vague-Presence server.

What this site stores

One local entry recording your cookie choice, and a session cookie if you sign in to an account. The session cookie is essential: it is what keeps you signed in, it holds a random token and nothing else, and it expires after 30 days or when you sign out. No analytics script loads unless you allow it on that notice.

The notify list

If you ask to be told when a build goes up, your email address is kept for that purpose alone. It is used to send one message when the first app is published and then only when a new app lands. It is never sold, forwarded, or added to a newsletter.

Feedback notes

If you send a note, the following is recorded so the report can be reproduced and answered:

• The email you typed, and a name if you gave one
• The app and build version you were using, once apps exist
• Your browser user agent and viewport size
• The text of the note

Notes are used to fix the software and to reply to you. They are not sold, shared with advertisers, or used to build a profile.

Accounts

An account holds an email address, an optional name, a password stored only as a salted hash, the time it was created and last used, and the notes attached to it. Deleting the account deletes those notes with it.

An account is needed to leave a note and to open any build marked invite only. It is not needed to use the other apps or to join the notify list. When you create one, a six digit code is sent to the address to confirm it is yours; the code is stored hashed and discarded once used or after an hour.

Keeping bots out

The forms carry a hidden field that a person never sees and a signed timestamp from the moment the page loaded. The server also counts submissions per connection. None of this identifies you and nothing is kept beyond the counts, which expire within an hour. If Cloudflare Turnstile is switched on, its widget runs on the form and Cloudflare sees your connection details under its own privacy policy.

Removing your data

Clearing site data in your browser removes everything stored locally. To come off the notify list, or to remove a note or an account, send a request from that email address and it is deleted within 30 days.

Contact

Questions about any of this go to contact@vaguepresence.com.