Most privacy policies are long because there is a lot to admit. This one is short for the opposite reason.
{"breaths": …, "savedAt": …}
breaths is the running total this site has taken, counted across everyone who has ever had it open. savedAt is when that file was last written. Neither is attached to a person, and there is no second file.
That is the file, not a tidied-up version of it — the same digits in the same order, with no thousands separators, because that is not what is in there. The counter on the front page is usually a few breaths ahead of this: it writes to disk every fifteen seconds, and in between, the newest few live only in memory. If the two ever disagree by more than that, this page will say so on the line above.
No sign-up, no email, no password, no profile. The page has no field you can type into — not a search box, not a comment, not a name. Nothing you could tell us, you can tell us.
One key, easesoul.sound, remembering whether you have turned the sound on before, so the little halo around the sound button stops pulsing after the first time. It lives on your device, it never leaves it, and clearing your site data removes it.
No cookies. Not for sessions, not for analytics, not for anything.
Your browser opens a WebSocket so the two numbers on the page can be live. To keep one person from posing as a crowd, the counter allows a limited number of connections from the same address, which means your IP address is held in memory while you are connected.
It is never written down. It is not logged, not stored, not counted, and it is gone the moment you close the tab. Access logging is switched off on that endpoint entirely.
Page views are counted with Cloudflare Web Analytics, which sets no cookies and does not fingerprint or follow anyone between sites. It tells us how many people arrived and roughly where from — enough to know whether this thing spread, which is the only question we have.
Cloudflare also serves the site, so like any host it processes the requests needed to deliver a page. Their privacy policy covers that part.
Following a breath means not touching anything for minutes at a time, which is what sends a monitor to sleep and locks a phone. While you are here the page asks the browser to hold the display awake. It stops asking half an hour after your last click, key or touch, so a tab you left open does not keep your screen on all day.
Pressing share draws the image in your own browser and hands it to whatever you share with. It is never uploaded here, and we never see it.