Privacy

holoesthesia · last updated 20 October 2026

holoesthesia (holoesthesia.com) turns a word, a phrase or a moment into a form, a colour and a sound (a holo). It is made by k0ba (k0ba.com). This page says what it stores, why, and how to have it removed. In short: no ads, no third-party trackers, no selling of data. We do keep, for 90 days, which words each browser looks at (below), and you can switch that off.

Without an account

• The words you type. A word is looked up in the archive. If it is new, it is counted as wanted, and when it is imagined, the word and its form are kept in the public archive, without any link to you. Please don't type personal information as a word.
• Counts. How often each word is shown or asked for, per day. These are totals, not tied to a person.
• Your free holos. How many new holos this browser has imagined without an account (by the random id below), so the free ones can be counted. Forgotten 90 days after your last visit. Each day we also count the free holos used from your network, so a private window doesn't start over: the network is kept only as a scrambled code that changes every day (it can't be turned back into your IP address or matched with another day) and deleted after two days.
• Your visits. Your browser gets a random id (kept in its local storage, not a cookie), and each page load another one. With it we keep which words you looked at, in what order, how you reached each (typing, a suggestion, your history), how long you watched it, whether sound was on, whether you saw the sign-in / waiting-list card and what you did there. On the home page we also keep how far down you scrolled (which sections you reached, and how long each was on screen) and which buttons you pressed. With the first page of a visit we also keep your country (as Cloudflare reports it), your device type (phone, tablet or computer, not the model), your browser and system family (such as Chrome on macOS, not the version), the page that linked you here (its address without the part after a “?”) and the campaign tag in our link, if it has one (such as utm_source=x, or that it was an ad click; the ad's click id itself is not kept). We use this to understand which words and paths work, and nothing else. It is kept for 90 days, then deleted automatically. It holds no name, email or IP address.
• Your IP address is used by our host, Cloudflare, to deliver the site and by us to limit how many requests one network can make (abuse protection). We don't store it.
• In your browser the app remembers small preferences such as sound on or off, and the words you have looked at (local storage).

With a free account (Google or GitHub)

When you sign in, Google or GitHub tells us your account id, your email address and whether it is verified, your name and your profile picture address. We keep these to know it's you, and we count the new holos you have imagined against your free allowance. We ask for nothing else: no contacts, no files, no repositories, and we never post anything for you.

• Cookies. hs_session keeps you signed in (90 days, or until you sign out); hs_oauth protects the sign-in step itself (10 minutes). Both are strictly necessary, so there is no cookie banner.
• Words you imagine while signed in go to the public archive like everyone else's, without your name.
• Your visits (above), from the browser you sign in with, are linked to your account, so we can see how you use it. The switch above stops this too. Deleting your account removes the link.

The waiting list

If you leave your email to hear when a paid tier opens, we keep the email and the word you were looking at, and use them only to write to you about that. Ask us and we remove it.

Who processes data for us

• Cloudflare: hosting and delivery of the site.
• Neon: the database (archive, accounts, waiting list).
• OpenRouter and the AI model it routes to: receive the text of a new word to imagine it, never who asked.
• Google and GitHub: only if you choose to sign in with them.
• Google Fonts: the page's typefaces are loaded from Google.

How long

Account data stays until you ask us to delete it. Sessions expire after 90 days. Visits are deleted after 90 days. Waiting-list emails are kept until the tier opens or you ask to be removed. Archived words are part of the public archive.

Your rights

You can ask to see, correct or delete what we hold about you, or object to it being processed, by writing to hello@k0ba.com. If you are in the EU/EEA you can also complain to your data protection authority. holoesthesia is not meant for children under 16.

Changes

If this changes in a way that matters, the date above changes and signed-in users are told on the site.