Privacy

holoesthesia · last updated 27 September 2026

holoesthesia (holoesthesia.com) turns a word into a form, a colour and a sound. It is made by k0ba (k0ba.com). This page says what it stores, why, and how to have it removed. In short: no ads, no analytics trackers, no selling of data.

Without an account

• The words you type. A word is looked up in the archive. If it is new, it is counted as wanted, and when it is imagined, the word and its form are kept in the public archive, without any link to you. Please don't type personal information as a word.
• Counts. How often each word is shown or asked for, per day. These are totals, not tied to a person.
• Your IP address is used by our host, Cloudflare, to deliver the site and by us to limit how many requests one network can make (abuse protection). We don't store it.
• In your browser the app remembers small preferences such as sound on or off (local storage). They never leave your device.

With a free account (Google or GitHub)

When you sign in, Google or GitHub tells us your account id, your email address and whether it is verified, your name and your profile picture address. We keep these to know it's you, and we count the new words you have imagined against your free allowance. We ask for nothing else: no contacts, no files, no repositories, and we never post anything for you.

• Cookies. hs_session keeps you signed in (90 days, or until you sign out); hs_oauth protects the sign-in step itself (10 minutes). Both are strictly necessary, so there is no cookie banner.
• Words you imagine while signed in go to the public archive like everyone else's, without your name.

The waiting list

If you leave your email to hear when a paid tier opens, we keep the email and the word you were looking at, and use them only to write to you about that. Ask us and we remove it.

Who processes data for us

• Cloudflare: hosting and delivery of the site.
• Neon: the database (archive, accounts, waiting list).
• OpenRouter and the AI model it routes to: receive the text of a new word to imagine it, never who asked.
• Google and GitHub: only if you choose to sign in with them.
• Google Fonts: the page's typefaces are loaded from Google.

How long

Account data stays until you ask us to delete it. Sessions expire after 90 days. Waiting-list emails are kept until the tier opens or you ask to be removed. Archived words are part of the public archive.

Your rights

You can ask to see, correct or delete what we hold about you, or object to it being processed, by writing to hello@k0ba.com. If you are in the EU/EEA you can also complain to your data protection authority. holoesthesia is not meant for children under 16.

Changes

If this changes in a way that matters, the date above changes and signed-in users are told on the site.