This Privacy Policy explains what personal information The Sealed Room ("we", "us") collects when you use thesealedroom.com and our membership (the "Service"), why we collect it, who we share it with and the choices and rights you have. We collect only what we need to provide the Service, take payment and keep the Service secure. We do not sell personal information, we do not use advertising or cross-site tracking, and we do not use third-party analytics services.
| Information | Purpose |
|---|---|
| Email address and the name you choose to give | To create and secure your account, sign you in, send confirmation codes and contact you about your account or purchase. |
| Password | Stored only in hashed form by our authentication provider. We never see or store it in readable form. When you choose a new password, your browser checks it against a list of passwords exposed in past data breaches (see Pwned Passwords below); the password itself never leaves your browser. |
| The fall-off audit | Unless you make an account, we keep nothing from it. Your answers stay in your browser on your device. To show your result, the options you tapped are sent to our server, used once and not stored. When the AI-written result is switched on, those options and anything you typed in the audit are also sent to Anthropic to write it, and are not stored by us. If you choose to make a free account at the end of the audit, your read, your plan, the sentence you told yourself, the floor you chose and the days you ticked are saved to your account so you can open them on any device; only you can see them, and they are erased when you delete your account. What you typed in the two long answers and the letter you write are never saved. The email box in the audit belongs to Substack: if you subscribe there, your email goes to Substack under Substack's own privacy policy, not to us. |
| Terms acceptance | The date and version of the Terms you accepted, kept on your account as a record of your agreement. |
| Your progress and content in the Service | Your answers in the free experience, the daily actions you choose, your progress, lesson completion and any private notes, so the Service can remember them across sessions and devices. For members, this includes the folder: how each day ended that you choose to record, where you landed and the thought before it if you write them, and the monthly read written from them at the start of each month. It also includes the days you mark the daily task done, and each time you use "ride it out": where you were about to land if you write it, how strong the pull was before and after, and whether you held. Only you can see these in the Service. We do not read them: nobody at The Sealed Room opens, reviews or exports your conversations, notes, folder or answers. They are stored with our database provider, so someone with administrative access to it could technically reach them; we use that access only to keep the Service running and secure, and would look at your content only if the law required it. Without an account, the free experience stores them only in your browser. |
| Messages you send us | If you are a member and use "message PM", your messages and our replies are stored on our servers so we can read and answer them. They are visible only to you and to us. |
| The AI feature (the Keeper) | For members only. The Keeper saves each conversation to your account, together with short facts it keeps about you from what you tell it (for example, the sport you play), so it can remember you between visits. On the last stair, your conversation with the AI that designs your character is saved to your account the same way, so you can come back to it; "start over" deletes it. Only you can see these in the Service. We do not read them: nobody at The Sealed Room opens, reviews or exports your conversations, notes, folder or answers. They are stored with our database provider, so someone with administrative access to it could technically reach them; we use that access only to keep the Service running and secure, and would look at your content only if the law required it. You can delete any conversation or any remembered fact at any time from inside the Keeper, and all of it is erased when you delete your account. We also record how many messages you send each day and their length, to enforce usage limits and manage cost. Anything that looks like a password, key or access token is blanked before it is saved or sent. If you write about suicide or self-harm, crisis lines are shown under the reply and one is added to a daily count that holds a number only, with nothing you wrote and no link to you (see section 9 of the Terms). |
| Payment information | Processed entirely by Stripe. We never receive or store your card number. We keep your Stripe customer and subscription identifiers, your membership status and your renewal date. |
| Checkout confirmations | When you pay, we record the time, your IP address, your browser type and the exact statements you confirmed (acceptance of the Terms and, where applicable, the request for immediate access and acknowledgement of the loss of the right of withdrawal). We need this record to respond to disputes and chargebacks. |
| Usage measurement ("visit steps") | On the free experience and our sales pages we record which step of the page a visit reaches, how far down a page it scrolls, which button was pressed and where the visit came from (a campaign tag, the referring site or which of our links was followed), under a random visit identifier, so we can see where people leave. If you are signed in, these records are linked to your account. Separately, outside the EU, the EEA, the UK, Switzerland and Quebec, we count each opening of our front page and our link page, and each tap on our link page, with no identifier kept on your device and no link to your account. Consent rules are described in section 4. |
| Approximate location | Our hosting provider derives an approximate, city-level location from your IP address on each request. We use it only to show the time of day correctly in parts of the Service and to decide which consent rules apply to you. We do not store it. |
| Security records | When we detect abuse (for example an excessive number of requests, an invalid sign-in token or a forged payment notification), we record the event type, the time and a shortened IP address with its last part removed. Kept for 90 days. |
| Server logs | IP address, browser type and pages requested, kept for a short period by our hosting provider for security and troubleshooting. |
We share personal information only with the providers that operate the Service on our behalf, and only to the extent they need it:
Some of these providers are located in the United States. Where personal information is transferred out of the EU, the EEA, the UK or Canada, the transfer relies on standard contractual clauses, the EU-US Data Privacy Framework or equivalent safeguards. We may also disclose information where required by law or to protect our rights, users or the public.
We do not use advertising or cross-site tracking cookies. The following items may be stored in your browser:
| Name | Purpose | Duration |
|---|---|---|
sr_at (cookie) | Keeps you signed in on members' pages. Set by our server as HttpOnly, Secure and SameSite=Strict. Strictly necessary. | 30 minutes, renewed while you are active |
sb-…-auth-token | Your sign-in session with our authentication provider. Strictly necessary. | Until you sign out |
sr.ck, sr.lastActive, sr.short | Whether a sign-in cookie was set, the time of your last activity, and whether you chose not to stay signed in on this device (if you did, you are signed out after 30 minutes of inactivity). Strictly necessary. | Until you sign out |
sealedroom.v3, sr.hall.*, sr-progress-*, sr-note-*, sr-draft, sr.vault.v1, sr.replay.v1, sr.vault.s | Your progress, answers, notes and position in the Service, saved on your device so the Service can continue where you left off. Functional, provided at your request. | Until you sign out, clear them or delete your account |
sr.stairs.* | Display settings on the stairs, and which of your saved conversations with the Keeper was open last, so it reopens there. | Until you clear them |
sr.sfx, sr.reduceMotion, sr.skipDoor, sr.theme | Your sound, motion, display and theme preferences. | Until you clear them |
sr.analytics, sr.notice, sr_notrack | Your choice about usage measurement and whether you have seen the notice about it. | Until you clear them |
sr_sid, sr.utm | The random visit identifier used for usage measurement, and the campaign or site that first brought you to us. Created only if usage measurement is on for you. | Until you clear them |
__stripe_mid, __stripe_sid (cookies set by Stripe) | Set by Stripe's payment form during checkout for fraud prevention. | 1 year / 30 minutes |
Wherever you are, we ask before creating the visit identifier or recording any visit steps, and we record no visit steps unless you tap "ok". Outside the EU, the EEA, the UK, Switzerland and Quebec, one thing is counted for every visit whatever you choose: that our front page or our link page was opened, which button on our link page was tapped, and the name of the site that sent you. This count uses a one-time random number that is not stored on your device, is never linked to your account and cannot recognise you on a later visit. In the EU, the EEA, the UK, Switzerland and Quebec, and wherever we cannot tell your country, nothing at all is counted unless you tap "ok". You can change your choice at any time by clearing this site's storage in your browser or by emailing us. Adding ?notrack=1 to any address on this site turns off all measurement in that browser, this count included. Strictly necessary storage cannot be turned off because the Service does not work without it.
We process personal information to perform our contract with you (providing your account and membership); for our legitimate interests (securing the Service, preventing fraud and responding to disputes); to comply with legal obligations (tax and accounting records); and, for usage measurement, on the basis of your consent, which you may withdraw at any time.
We keep your account information for as long as your account exists. You can delete your account at any time from your account page. Deletion cancels any active subscription and then permanently erases your account, your progress, your notes, your messages to us, your conversations with the Keeper and what it remembers about you, the conversation that designed your character, your folder and its monthly reads, your daily tasks and your "ride it out" records, and the visit records linked to your account. The count of messages sent to the AI feature remains only as part of an anonymous daily total, and the daily count of crisis lines shown is a number with no personal information in it. We retain payment records held by Stripe as required by tax and financial regulations, and checkout confirmation records for up to six years so that we can respond to claims. Security records are deleted after 90 days.
You can access, correct, download or delete your information from your account page or by contacting us. Depending on where you live, you may also have the right to object to or restrict processing, to data portability, to withdraw consent and to lodge a complaint with your data-protection authority. Residents of California have the right to know, delete and correct their personal information; we do not sell or share personal information for cross-context behavioural advertising, and we will not discriminate against you for exercising your rights. We respond to requests within the time limits set by applicable law.
The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.
All connections use HTTPS. Passwords are hashed. Database access is restricted per account by the database itself, and members' pages are delivered only after the server verifies who is requesting them. We apply rate limits and monitor for abuse. No online service can guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and the relevant authorities as required by law.
We may update this Privacy Policy from time to time. The "Last updated" date shows the current version. If we make a material change, we will notify you on the Service or by email.
For questions or requests about your personal information, contact us at p.m.1594rward@gmail.com.