Your data

Where it lives

• Your uploads and your house: in private storage at Cloudflare (R2). Nothing in it is public; every photo is shown through a link that only works for a short time.
• Your account and your houses' details: on our server at Amazon Web Services in Tokyo.
• Backups: at Amazon Web Services in Tokyo, so a broken server never loses your house.

How long we keep it

• Your original photos, videos and chat: deleted 7 days after your house is ready (counted from the last change you make to it). The house keeps working; it uses its own smaller copies.
• A house you never sent: deleted after 7 days untouched.
• A house we could not finish: your uploads stay so you can try again, until you delete it.
• Your finished house: until you delete it.
• The copy on our computer while we make it: deleted as soon as the house is done.
• Backups: a copy of our database every night, each kept 30 days, and a copy of every finished house, updated every night.
• Server logs: 30 days.
• Your login: stays signed in for 60 days, or until you log out.

Deleting

A house: open My houses and delete it. Its photos, videos, chat and the house are deleted from storage right away, its copy in our backups goes the next night, and our nightly database backups roll it off within 30 days.

Your whole account: email [email protected] from the address you signed up with, and we will delete it and everything in it within 30 days (usually much sooner).

Getting a copy

Want a copy of what you sent us, or of your house? Email us and we will send it.

Keeping it safe

• Storage is private and every link to a photo expires within an hour.
• Passwords are stored scrambled (scrypt), never as written.
• Everything travels over HTTPS.
• Only the people who make your house can see what you sent, and only to make it.