Resident accounts

Google handles sign-in. We store your stable Google account identifier and verified email address. We do not request Gmail access, send sign-in emails, or store your Google password or provider tokens.

If you choose Link account to your Pal, we verify an Instagram DM and store your Instagram identifier, username and resident link. If no resident exists, we create one with a saved appearance. Your Instagram username is visible in the world. We do not store DM history. Sign-in sessions last up to seven days; verification challenges expire after ten minutes.

Deleting your Pal Society account removes its sign-in records and Pal link and revokes its sessions. It does not delete your Google account, world resident or progress. Temporary abuse-prevention records expire separately; restricted backups follow the host retention policy.

Manage your account

Account diagnostics record sign-in and Pal-link steps, timestamps and error categories. Reports cover the last 30 days; older events are removed when the next event is recorded. After Google sign-in these records are associated with your account. They contain no private codes, provider tokens or message text. Account deletion removes associated diagnostics. Optional browser click signals respect the visit analytics opt-out; server sign-in and linking records remain available for account support. Inactivity only suggests an unfinished flow; it does not prove you left.

Visit analytics

We measure visits, loading success, searches, profile openings, following, language/music changes and approximate time with the page visible. A new random visit ID is created for each page load. It is not connected to an Instagram account. To count unique browsers, a separate random identifier valid for 7 days links visits from this browser. After expiry it is replaced on the next visit.

We do not store search text, resident names, full IP addresses, precise location, screen recordings or camera movements in analytics. Routine visit events include only broad device, language, referral and approximate country categories. The country comes from Cloudflare; no IP address is stored in analytics. Analytics uses no cookies. The temporary browser identifier is stored in localStorage; its expired record may remain until the next visit or site data is cleared. Opting out removes it.

For failure investigation, this browser may keep up to four small local records of unfinished loading steps and sanitized technical errors, valid for up to 7 days. If you return, an interrupted attempt may be reported, including across tabs where supported. A missing completion is not proof of a crash. Detailed reports are sent only for errors, suspected failures or recovered interruptions, not continuously during healthy visits. Reports include safe code positions, browser and operating system, available device model and approximate browser-reported memory and storage usage/quota. At most 8 report slots are retained and 14 updates may be sent per visit, plus one retry per failed delivery. We do not collect free device RAM or storage, full URLs, search text or raw console logs. Server reports expire after 7 days; local records and reports follow the same opt-out controls.

Detailed events expire after 7 days. Daily totals without visit IDs expire after 90 days. Analytics is stored on our server separately from the world and is not backed up. Collection stops for browsers sending Do Not Track or Global Privacy Control, or when the site is opened with ?analytics=off. Opening ?analytics=off also saves an opt-out preference in this browser for this site, until site data is cleared. This preference is not a visitor identifier.

Hosting and security providers may process technical connection information separately to serve and protect the site.

Return to the world