Privacy

Private experiments

Private experiments require a Google account with access or a share code. Google sign-in shares your verified email address and profile photo with RobotCandy. We use it to check which experiments you can open. A share code grants access to the experiments selected for that code. Your profile photo appears in the account button. The image loads from Google without a page referrer.

Signing in sets one essential session cookie, called __session. It lasts up to twelve hours for Google sign-in or eight hours for a share code. A code can expire sooner. Signing out removes the session. Session records and short-lived, hashed rate-limit identifiers are stored on the server. These checks help prevent guessing attacks; they do not track your activity across websites.

Access lists store the permitted email addresses, code labels, selected experiments and expiration dates. Share codes are stored as keyed hashes. Revoking a grant removes its access. Private experiment pages do not load the Lab analytics beacon. Access records are stored in the Lab's Firebase project in the United States.

Different share codes add their experiments to your access in the same browser. Each unlock expires independently, within eight hours. We do not save codes in localStorage or sessionStorage. A share link contains its code in the part after #. We remove it from the address bar before loading analytics. Your browser or the app you received it in may retain the original link. Anyone with the link can use its access until it expires or is revoked. Signing out removes all private access from this browser.

Public visitor measurement

RobotCandy uses Cloudflare Web Analytics to understand visits to this Lab and improve its experiments. It measures page views, referring websites, country, browser, device type and page performance.

This measurement does not use cookies, browser storage or fingerprints to identify visitors. It does not follow you across websites. Cloudflare receives technical request data to provide the service. Its dashboard shows statistics, not visitor profiles.

Cloudflare does not record URL query parameters. Web Analytics reports are available for the previous six months. Read the Cloudflare Web Analytics documentation and Cloudflare privacy policy.

Camera and microphone experiments ask for browser permission before using those devices. Analytics does not receive their recordings, images or your input. Experiments that use external services explain their data use within the experiment. External websites have their own privacy policies.

For questions or objections about this measurement, use the RobotCandy contact form. For hosting, contact and your privacy rights, see the RobotCandy privacy notice.