PAXAL
privacy
This page is short on purpose. We don't want anyone to have to read a privacy policy to understand what a browser game does with their data. If something below is unclear, email us — the address is at the bottom.
WHAT WE STORE ON YOUR DEVICE
OPFS (Origin Private File System) — splat chunks
Decoded scene chunks are persisted locally so the second visit cold-boots in under two seconds. The cache is capped at ~1 GB; older chunks evict on LRU. Clearing browser site data empties it. We never read it back to a server.
localStorage — settings, history, calibration
Three small JSON records: your selected arena and audio mix (bash:game-state:v1), per-arena drive log (bash:drive-log:v1), and the first-run preset calibration (bash:calibration:v1). A combined ~5 KB ceiling. Cleared by clearing site data.
sessionStorage — once-per-tab UI flags
The pause hint shows once per browser session via the bash:pause-hint-shown flag. Cleared on tab close.
Service worker cache — offline shell
HTML, JS, CSS, fonts and audio loops are cached for offline access. Splat chunks are NOT in this cache (OPFS owns those). Cleared by unregistering the service worker or clearing site data.
WHAT WE SEND TO OURSELVES
Anonymous telemetry through PostHog: WebGPU adapter family, first-pixel time, frame rate samples, cache hits and misses, arena selections, photo captures, settings touches. No account, no email, no IP-derived location, no cross-site tracking. The point of the data is to know whether the build runs fast enough on the hardware tier you have — nothing more.
PostHog is hosted at us.i.posthog.com (United States). Their policy is at posthog.com/privacy.
If you tap the settings drawer's telemetry-opt-out chip, nothing leaves your device. The opt-out is sticky and travels with the localStorage settings record above.
The full list of events the runtime can fire (with payload shapes) lives at /api/telemetry-events.
Want to see what your browser has stored about your sessions (lifetime stats, photo hunt progress, achievements)? /data renders the lot — pure read, nothing leaves the device.
WHAT WE DON'T DO
- ·No third-party ad networks, ever.
- ·No selling, renting or sharing telemetry data.
- ·No tracking pixels, no fingerprinting beyond the adapter string the GPU itself reports.
- ·No email collection — the page never asks for one.
- ·No autoplaying audio. The AudioContext primes silently and only un-mutes on a real user gesture.
WORLD CAPTURES
The drivable scenes are real-world Gaussian-splat captures. They were sourced from public datasets or self-captured; identifying information visible in the scene (faces, license plates, etc.) is incidental to the photograph and we don't process or recognise it.
CONTACT
Questions, opt-out requests, takedown requests: hpj675@gmail.com
response within 48 hours · founder reply