Public plots and visitor presence
Creating a plot submits an owner nickname, pet name, pet shape and remembrance choice after you explicitly accept public visibility. These names, the plot identifier and slot, selected theme, saved decorations, saved remembrance choice (hidden, static memorial figure or companion), optional appearance settings, revision and update time are public park data. They are available to visitors and through the public world interface. Avoid real addresses, contact details and private information in names.
While connected, your browser sends movement coordinates and direction. A transient player identifier, display names, pet shape, remembrance choice, optional appearance settings and movement are shared with other connected sessions. Quiet view hides moving companions on screen; it does not make these shared session fields private. The online count comes from connected sessions. Live presence is held for the connection rather than saved as a movement history; leaving removes the live presence. A saved public plot remains separate from live presence.
Email sign-in, browser credential and recovery
The park creates an opaque guest identity and an essential HttpOnly cookie so you can browse. Creating or saving a plot requires verifying an email with a six-digit code. The browser sends its cookie to the same site to authorize the session and plot management; JavaScript cannot read the HttpOnly cookie. Verification rotates the browser credential. Signing out revokes it and leaves you free to browse as a new guest. There are no advertising or analytics cookies.
The sign-in service receives your full email address to send a code through Resend. The park stores an email hash for account lookup and a masked address hint for your own account display. It stores a hash of the short-lived code, its expiry, attempt count and request-control information. Email addresses, email hashes, masked hints, codes and browser credentials are excluded from public plots and live players. A hash and masked hint are still account data; they are not a promise of anonymity. Resend processes the full recipient address and email content to provide delivery; its privacy policy describes its handling of information.
Use the same email and a new code to sign in or recover the same account and saved plot in another browser. Codes expire after ten minutes and are subject to attempt and request limits. A successful send request means the provider accepted the request, not that the message reached your inbox. If sending is unavailable or fails, the park reports it without creating a successful verification. Two existing accounts are not silently merged.
Older guest plots may have a private recovery code. The server checks its hash, and anyone holding the code can restore that unbound guest identity and replace the browser credential. Existing guest owners can still read, export or delete their plot. Binding a verified email keeps the plot identifier and layout and invalidates the old recovery code. Email accounts must use email sign-in for recovery; new email-bound plots do not issue recovery codes.
Local drafts and exports
Unsaved edits are stored locally in this browser when local storage is available, separately from the confirmed public plot. Local drafts include the proposed names, pet shape, remembrance choice, optional block-figure colors and appearance choices, theme, decorations, plot identifier and base revision. Source photos, sign-in codes, email addresses, recovery codes and management cookies are not included in drafts or layout exports. Codes are not placed in URLs or local storage. Signing out keeps the draft in this browser; it does not transfer an unsaved draft to another device. Browser storage can be cleared by you or the browser; an unsaved draft is not a server backup.
Save sends your proposed public plot to the server. A successful save updates the public layout. A version conflict requires a choice to reload the newer saved plot or keep the draft for review and an explicit later save. Export downloads a JSON copy to your device; protect or delete that file as you would any other local document. Recovery code downloads are separate private files that you choose to create.
Photo-referenced block figures
When you choose two to four photos in the free Pet photos tool, this browser reads image pixels to suggest three colors for an original block animal. You can change the suggested colors and appearance choices yourself. The preview starts paused in quiet remembrance, and Play lets you try its existing animation. This is a stylized reference using the selected animal template, not an exact reconstruction, identity match or inferred real-life behavior. The source image files, filenames, embedded metadata and photo previews are not sent to our server or an external AI service, and are not stored in browser drafts. Closing the tool releases the local previews.
Applying an appearance changes only your local draft and preserves its remembrance choice; it does not enable a companion. Pressing Save sends small appearance parameters such as colors, markings, and ear or tail choices to the park; those saved appearance parameters are public, like the pet shape, remembrance choice and layout. Original photos remain on your device. Fine 3D reconstruction and paid generation are not enabled in this version.
Deletion and current limits
With management access, use “My plot” and confirm deletion to remove the saved public plot and its legacy recovery association. Deletion does not retrieve copies another visitor may have made or erase files you downloaded. Local drafts for the deleted plot are removed by this browser after deletion is confirmed. You can clear other local site data in your browser settings. Deleting a plot or signing out does not delete the email account or guarantee removal of infrastructure records.
This server does not accept source photos, stories, payment details, chat messages or wallet connections. It has no trading or blockchain registration. It does not promise permanent storage or a retention term for infrastructure records.
Hosting and technical requests
Cloudflare provides delivery, server processing and storage for this park. Requests can involve metadata such as IP address, browser information, requested URL and request time to deliver and protect the service. Cloudflare's privacy policy describes its handling of information; this notice does not claim the hosting infrastructure keeps no logs.
Share links and aggregate statistics
A saved public garden can be opened by its permanent plot link. The link and its preview card show the saved pet name, plot number and a stylized illustration of the saved garden; they never include your email or unsaved draft. Plot pages currently request that search engines do not index them. Anyone who receives the link can visit, and third-party messaging services may cache previews. Deleting the plot makes its page and card unavailable on this site, but cannot recall copies.
We collect first-party counts for page views, scene readiness or errors, starting a garden, accepted email-code requests, successful verification, plot creation, first saved edits, copied share links, completed device sharing and opened shared gardens. Each event is sent at most once per page load, without an analytics cookie or account credential. Only the event category, English/Spanish locale, mobile/desktop screen category and broad source category (direct, search, social, referral or share) are counted per UTC day. We do not store an analytics identifier, email, pet name, IP address, referrer address or URL/query string in these counters. Hosting and security processing remain separate.
Do Not Track and Global Privacy Control signals suppress these counts. Aggregate counts are retained for 90 UTC days and available only to the configured team account. They are event counts, not unique people, conversions attributed to individuals, or return-visitor tracking. Test events are kept separate and excluded from normal totals.
Enlaces y estadísticas: un enlace de parcela pública y su tarjeta muestran el nombre guardado de la mascota, el número y una ilustración del jardín, nunca el correo ni el borrador. Estas páginas solicitan no ser indexadas. Contamos eventos por día UTC, idioma, pantalla móvil/escritorio y categoría general de origen durante 90 días, sin cookies analíticas, identificadores, direcciones IP, correos ni URL de origen. Respetamos Do Not Track y Global Privacy Control. Son eventos, no visitantes únicos; las pruebas se excluyen de los totales. Solo la cuenta del equipo puede consultar el informe.
Read how the park works or las instrucciones en español. Changes to the data collected or made public require an updated notice.