VVEILEDWORKS

Privacy Policy

Last updated: November 3, 2026

VeiledWorks (veiledworks.com) is a hobby website run by Joshua Doty (“VeiledWorks”, “we”, “me”). This page explains in plain words what the site stores, who else touches it, and how you can get your data deleted. It describes what the site actually does today. If that changes, I will update this page and the date above.

1. Just visiting

You do not need an account to look around, play the Arcade and Holodeck games, or use the Device Hub. As with any website, our server (see Hosting below) receives your IP address and basic request details when you load a page. We use your IP address only for short-lived abuse limits, for example to slow down repeated sign-up or AI requests. IPv6 addresses are shortened to their network part for this. We do not run advertising trackers or sell data.

2. Accounts

You can create a free account (a “Gamer Card”) from My VeiledWorks. To sign up with a handle and password we ask for only:

We do not ask for your email address, real name, phone number or birthday to create an account. (If you instead choose the optional Google sign-in, we store your Google account ID and email address; see section 6.) Your password is never stored as-is: only a salted one-way hash is kept. At sign-up you are shown a one-time recovery code, and only a one-way hash of it is kept. Keep it safe: it is the only way to reset a forgotten password, and I cannot read your password or your code.

We also store when the account was created and updated, a sign-in session (a hashed token plus an expiry) so you stay signed in, and a setting for whether your card is public.

3. What other people can see

If you make a Gamer Card, it is public by default, and you can switch it to private. Things you add to it can be seen by other visitors when your card is public. Depending on which features you use, that can include:

Direct messages and shared co-op workspaces are visible to the people you send them to or share them with. A person who receives a message or picture from you can keep a copy of it or screenshot it; we cannot take that back.

Being found by other people (People search)

The Find people page in My VeiledWorks lets signed-in people look for friends. By default you can be found only by someone who types your exact handle. You do not appear in name search or in “People you may know” unless you turn on “Let people find me by name and in suggestions” in My VeiledWorks → Settings. You can turn it off again at any time.

Anyone can report a card or a message. Reports are stored so they can be reviewed. The site owner can hide or remove content or accounts that break the Terms.

4. Games and Synth Rabbit reactions

If you are signed in, your best score per game and some game progress (for example, Synth Jumper skill progress, Highway Siege garage upgrades and Takeout // Rush podium results) are saved on our server. Scores are saved on our server only for signed-in accounts. Synth Rabbit reactions are small animated GIFs that pop up in response to things that happen on the site. They are played from files on our own server. You can turn them off in Settings; the choice is saved in your browser and, if you are signed in, on your account.

Reaction buddy and play history (new in 2.15.1). You choose which buddy reacts (Synth Rabbit or Synthia, or none); we never guess it. To pick a fitting reaction, the site counts, per game, how many times you played, won and lost, your best leaderboard rank, your current win and loss streaks, how often you retried after a loss, and whether you earned the “Jeddak of Games” crown. These are counts only: no scores beyond your normal leaderboard entries, no timestamps for each play, no chat text. If you are not signed in, the counts stay in your browser. If you are signed in, they are saved on your account (the counts already in your browser are added to it once, the first time you sign in). The reaction is picked by fixed rules from these counts and the time of day on your device; nothing is sent to an AI service. You can see the counts and reset them at any time in Settings → Synth Rabbit reactions, and they are deleted with your account.

5. Code Lab (AI tutor and builder)

The Code Lab at /lab/ needs a VeiledWorks account. It uses an AI model reached through OpenRouter (openrouter.ai). When you chat or ask for a build, the Code Lab sends to OpenRouter and the AI model provider behind it: your message, recent chat history, any code or project context you attach, your Code Lab profile notes, and your memory notes. OpenRouter and the model provider handle that data under their own terms and privacy policies, which I do not control. Please do not type passwords, private keys, or other secrets or sensitive personal information into the Code Lab.

On our database the Code Lab stores, per account:

Each query is tied to your signed-in account; there is no feature for one user to read another user’s Code Lab data. You can clear your chat history inside the Code Lab, edit or remove your memory notes there, and delete everything by deleting your account (see section 11).

Optional Google Drive backup. In the Code Lab you can back up or restore your memory to a single file in your own Google Drive. This uses Google’s drive.file permission only, which lets the Code Lab see just the one file it creates itself, not the rest of your Drive. The Google access token stays in your browser tab; our server never receives it and never stores it. Your memory is sent from your browser straight to Google. You can also back up to a file on your own device instead.

6. Google sign-in (optional)

VeiledWorks offers an optional “Continue with Google” (Sign in with Google) button. It is never required: you can always use a handle and password instead. It asks Google only for the basic sign-in information (openid, email and profile), and we use it only to identify you and set up or sign you in to your VeiledWorks account.

What we store if you use it: only your Google account ID (an anonymous identifier Google gives us) and your email address, linked to your VeiledWorks account so we can recognise you next time. We do not store your Google name or profile picture; Google sends them with the sign-in token, but we do not read or keep them. While you are choosing a handle on a first sign-in, your Google account ID and email are held for up to 10 minutes and then deleted. We never see or store your Google password. A VeiledWorks account created with Google has no password until you choose to add one in My VeiledWorks. You can link or unlink Google there at any time (unlinking deletes the stored Google ID and email).

We do not use Google data for advertising, do not sell or share it, and do not access anything else in your Google account. Use of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google’s sign-in script is loaded only when you press the Google button. You can revoke access at any time at myaccount.google.com/permissions, and delete the account on our side as described in section 11, which also deletes the stored Google ID and email.

7. Synth Rabbit, the AI helper

Synth Rabbit is an AI. On the Device Hub and elsewhere you can chat with it and, where offered, attach a picture or ask it to make one. These requests are processed by Cloudflare Workers AI. The server keeps only usage counts (to enforce daily limits), not the text of your conversation; the chat you see lives only in your browser tab’s temporary storage and is forgotten when you close it. Do not send anything you would not want an AI service to process. AI replies and AI-made images can be wrong, odd or inappropriate; see the AI section of the Terms.

8. VeiledWorks Meet (video rooms)

Meet is for adults only (18+). To start or join a room as a member, your account must be set to adult; guests can join only through an invite link after confirming they are 18 or older.

Video and audio run through 8x8 Jitsi as a Service (JaaS), not through VeiledWorks servers. 8x8 handles the call and keeps a device identifier to count monthly users. Recording, livestreaming and transcription are turned off, and nothing from the call is recorded or saved. Room names are random and are not stored on VeiledWorks servers.

The Synth panel inside Meet can search the web. When web search is on, your question (and the last few messages of that panel chat) is sent to OpenAI to search and answer; I ask OpenAI not to store it. Questions and answers are also checked by a safety filter on Cloudflare Workers AI. If web search is off or unavailable, Cloudflare Workers AI answers instead. I don't save your Meet questions, answers or chat; I only keep counts of how many questions were asked each day, for daily limits.

In the Synth panel's Work mode you can attach an image (for example a screenshot or a whiteboard photo) and ask about it. Your browser shrinks the image first; then the image, your question and the last few messages are sent to OpenAI to answer (I ask OpenAI not to store them), or to Cloudflare Workers AI if OpenAI is unavailable. Pictures you make with /imagine are created by Cloudflare Workers AI. I don't save uploaded or generated images; they stay only in that panel until you close the page. Please don't upload images of other people without their permission, or anything private you don't want sent to these services.

9. Hosting and who else handles data

I do not sell your data and do not share it with advertisers. I may disclose information if required by law or to protect the site and its users.

10. Cookies and browser storage

VeiledWorks itself does not set cookies and has no advertising or analytics trackers. It uses your browser’s localStorage (and, in the Device Hub, IndexedDB) to remember things on your device, such as your sign-in session, your My VeiledWorks saved items, whether you have already seen the intro, sound and visual-effect preferences for the Arcade and Holodeck, the Synth Rabbit reactions setting, your chosen reaction buddy and (if you are not signed in) your play counts, and Device Hub files. Synth Rabbit chat on the Device Hub uses temporary tab storage (sessionStorage). This stays on your device; clearing your browser data removes it. Your sign-in session stays in localStorage until you sign out or it expires. Third parties that the site loads (Google Fonts, and Google’s sign-in script only if you use Google features) may set their own cookies under their own policies.

11. Deleting your data

You can delete your account yourself. Open My VeiledWorks, sign in, and press “Delete my public card” (or “Clear everything”, which also erases My VeiledWorks data from your browser). This permanently deletes your account and the data stored with it on our server: your handle, password hash, linked Google account ID and email (if any), sessions, pictures, posts, comments and likes, scores and game progress, friends, blocks, your People-search setting and age answer, notifications, direct messages you sent or received (the other person’s copy goes too), Code Lab memory, history and projects, and usage counters. It cannot be undone. “Download my data” in the same place gives you a copy of your public card first.

Deletion does not reach: files you saved to your own Google Drive or downloaded to your device, copies other people made of things you shared, data already sent to OpenRouter or Cloudflare AI services (governed by their policies), or Cloudflare’s own logs and short-term backups. If you can’t sign in, or want help, email jdoty83@gmail.com and I will delete the account by hand.

12. Age

VeiledWorks is for people 13 and older. Do not create an account or use the Code Lab if you are under 13. If you are under 18 you should have a parent or guardian’s OK. If I learn that a child under 13 has an account, I will delete it. People who say they are under 18 (or whose age we do not know) can be found only by their exact handle; see Being found by other people.

13. Security and changes

Passwords and recovery codes are hashed, sessions use random tokens stored hashed, and the site is served over HTTPS. No website is perfectly secure, and I can’t promise it is. If I change this policy in a meaningful way, I will change the date at the top.

14. Contact

Questions, requests, or a data problem: jdoty83@gmail.com (Joshua Doty, VeiledWorks).

TERMS OF SERVICE →← VEILEDWORKS HOME