Privacy

What the app stores, where, and how to delete it.

Thaumaturgy is made by Beckham Enterprises. This page says what the app stores, where, and how to get rid of it. Short version: nothing is collected that the app doesn't need to work, nothing is sold, and you can delete your account yourself from inside the app.

Without an account

Everything you build — environments, boards, chapters, the current scene — is saved in your browser's local storage on your own device. It never leaves that device. "Your own tracks" plays audio files from your device without uploading them.

With an account

• Your email address — used to send you sign-in links and to identify your account. Nothing else is sent to it.
• Your synced data — the environments, boards, chapters and current scene you save, so they follow you between devices. Stored on Cloudflare's D1 database.
• A session cookie (th_session) that keeps you signed in on that device for thirty days. It's HttpOnly, secure and first-party; there are no advertising or third-party cookies.

Sign-in links are single-use and expire after fifteen minutes. Sign-in emails are sent through Resend from beckhamenterprises.com.

Usage counts

To see whether anyone is using the thing, the app records a few anonymous events: a visit (once per browser session), an environment being played (with the environment's name), a board being loaded (with the board's name), and a sign-in. Each event carries the country Cloudflare reports for the request and, if you're signed in, your account id. No IP addresses, no device fingerprints, no cross-site tracking. Cloudflare Web Analytics runs on the site; it is cookie-less and doesn't build profiles.

Feedback

If you use the feedback form, the message, its type, the screen you sent it from, your country and your browser's user-agent string are stored, along with your email address if you gave one or were signed in. It's read by a person. Feedback is rate-limited by a hashed form of your IP address that isn't stored anywhere else.

Where it lives and who can see it

Everything runs on Cloudflare (Workers, D1, R2) in their global network; Cloudflare keeps ordinary request logs as any host does. Only the site owner can see account and feedback data. Nothing is sold, shared with advertisers, or used to train anything.

Deleting your account and data

In the app, sign in and press Delete my account in the footer. It removes your email, your synced environments, boards, chapters and scene, and your sessions from our servers immediately and signs you out. Usage events and feedback lose their link to your account (they keep nothing that identifies you). Anything saved in a browser stays on that device until you clear the site's data. If you can't sign in to do it, send a note through the feedback form from the address on the account and we'll delete it for you.

Children

The app has no ads and collects nothing beyond what's listed above, but it isn't directed at children under 13 and doesn't knowingly keep accounts for them.

Changes

If this page changes in a way that matters, the change and its date will be noted here.

Last updated 2026-09-20. Questions: use the feedback form in the app.