Privacy
This place only works if it's safe to be honest in. So the short version: we don't know who you are, we don't want to know, and nothing written here is handed to search engines.
The one thing to remember: everything you release into the sky — whispers, wishes, and replies — is public inside the app. Anyone who opens the sky can read it. It is private from the outside world, not from the people in it. Please don't write anything you'd be hurt to see read.
No account, no identity
There is no sign-up. We never ask for an email address, a phone number, a real name, or a social login, and there is nothing to log into.
The name you type when you post is just a label you choose for yourself. It can be anything. It is the only way to find your own balloons again later, so pick something only you would think of — and don't use your real name.
What is stored
On our server, for each whisper or reply:
- the text you wrote;
- whether it's a whisper or a wish;
- the name you chose, if you typed one (displayed partly masked, e.g. ab***);
- the language the app was showing;
- the time it was posted, its reply count, and its report count.
That's the whole record. There is no user table, because there are no users — only messages.
What is not stored
- No tracking cookies and no advertising identifiers.
- No analytics — no Google Analytics, no pixels, no third-party scripts of any kind. Every script, image, video, and piece of music on this site is served from our own domain.
- No IP addresses or device fingerprints in our database. Our host (Cloudflare) processes connection data such as IP addresses in order to serve and protect the site, as any web host must, but we don't copy it into our records or link it to anything you write.
- No location, contacts, camera, or microphone access.
What stays on your device
A few small things are kept in your browser's local storage so the app behaves sensibly: which balloons you released, which ones you've left a light on, whether you've seen the first-visit notice, and your music and background preferences. None of it is sent to us. Clearing your browser data erases all of it — including the record of which balloons were yours.
Search engines
Only the official pages — the home screen, About, Principles, Privacy, and the blog — are open to search engines, and our sitemap lists nothing else. Whispers, wishes, and replies live behind the app's API, which is blocked in robots.txt and never published as its own web page. Your words are not going to turn up when someone searches your name.
How long things are kept
Whispers and replies are permanently deleted 365 days after they were posted, automatically, by a job that runs every day. Nothing is archived afterwards. A sky that clears itself is part of the design — what you put down is not meant to follow you forever.
Safety filtering
Before anything is saved, the text passes through automatic filters that mask contact details (email addresses, phone numbers, messaging handles) so people can't be pulled out of the sky and into a private channel where no one can help them. The crisis hotlines are shown to everyone writing a sorrow, so nothing you type decides whether you're offered help.
When someone reports a whisper or a reply, that one piece of text is sent to Cloudflare's Workers AI to be judged against the community principles, and the verdict decides whether it's hidden. Only the reported text is sent — nothing that identifies who wrote it — and Cloudflare states that it does not use inference data to train models. Nothing here is read by a human as a matter of routine.
Copyright and reposting
What you write stays yours. Only you may repost your own whisper elsewhere — the app gives you a way to share your own. Reposting someone else's whisper off this site isn't allowed, and please don't screenshot other people's pain for an audience.
Removing something
There's no delete button yet — with no accounts, there's no way for the server to prove a request came from the person who wrote it. In the meantime: use the report button on the whisper or reply, which sends it through an automatic check and hides it if it breaks the community principles (three reports hide it either way). Or write to us at the address below and tell us the name you posted under and roughly what it said. Everything is deleted automatically after a year regardless.
Hidden content is hidden from everyone, including the person who wrote it. If you look up your own whispers by name, a hidden one is still listed — marked as removed, with the text gone — so it's clear that it existed and what happened to it.
Children
This is not a service intended for children. Some of what people write here is heavy. If you're under 13, please don't use it.
Changes
If this policy changes in a way that matters, the date at the top changes with it. We won't quietly start collecting something this page says we don't.
Contact
Questions, removal requests, or anything that worries you: hello@cubewithin.com.