Private first.
Shared by choice.
The important question is always: where is this saved, and who can see it?
Moments and account sync
Journal moments first save in this browser’s local storage. Account sync, when enabled in My profile, keeps a server copy across devices. Sign-in alone does not share your timeline. A moment’s audience and timeline sharing must both permit friends before they can read it.
Separate sharing choices
Uploads begin private. A media-sharing switch grants accepted friends access to that clip. A published structure is a snapshot, separate from your field draft. Posts and plans have their own visibility. Global chat is visible to its room participants; use a friend room for a smaller audience.
Profile discoverability
Discoverable profiles expose a handle, display name and presentation details to signed-in search users. Friendship does not require making every memory visible. My profile controls discoverability and sharing. Blocking removes a friend connection and restricts relevant shared access.
What is stored
Browser storage holds your journal and view preferences. The account service stores profiles, passkey public credentials, session records, selected synced content, friendships, posts, room plans and messages. Uploaded media is stored privately in Cloudflare R2 and served through permission checks. Hosting and account data use Cloudflare infrastructure.
Retention
Chat messages expire after 30 days and expired records are removed by scheduled cleanup. Sessions expire after up to 30 days when you choose to stay signed in, or within 24 hours for a browser session. Saved journal moments do not use chat’s 30-day expiry. Authentication challenges and one-time device codes have shorter expiry periods.
Export, deletion and copies
Export your journal from the atlas’s My landscape tools. You can remove moments, posts and owned media, and delete your account through account settings. Account deletion removes the member record and stored uploads; device journals and copies someone exported or added to their timeline may remain. Unsharing prevents future authorized reads; it cannot recall a copy already made. Infrastructure backup retention is not specified by this app.
Data and AI
The current application does not integrate advertising, data-sale or AI model-training services. Feelings are chosen by people. Word placement uses local matching or an explicitly random charade. The Data & AI page explains the implementation’s scope and limits.
◆ Saved to this device · Only you
◆ Saved to your account · Only you
Behavior description updated October 6, 2026. An independent legal privacy review has not been completed.
Data & AI →