A private space.
Clear boundaries.
Who looks after your information
Intraspera is operated by MMAO Holdings LTD, registered in England and Wales, company number 17428870. Registered office: 66 Paul Street, London, EC2A 4NA, United Kingdom. We are responsible for the personal information described here. For privacy requests, contact support@intraspera.com.
Your account, story and journal
We use your email address and sign-in information to provide your account. Signed-in writing is stored in our AWS PostgreSQL database in London and cached on your device. Authentication is provided by AWS Cognito. Your journal, guided writing and plans are not sent to the feedback summary service or included in invitations.
The free first-chapter sample normally keeps answers in the current page’s memory. If you choose to carry it through sign-in and checkout, we keep it in this browser tab for up to 24 hours. It is only sent to our servers when you then choose to save it to your private journal. You can download or print your chapter; copies you save are then under your control. Leaving or reloading clears answers that you have not chosen to carry forward. Signing out clears the temporary carried chapter. Older device previews may still exist in local storage from an earlier version; Settings lets you read, export or remove them. Device drafts are not encrypted by the app. Anyone with access to your browser profile may be able to read them. Signing out clears cached account writing, but preserves separate older device drafts.
The Looking Glass: anonymous group feedback
Anyone with an invitation link can see its title, introductory note and questions, and respond while collection is open. We do not ask respondents for names or email addresses. We store a hashed random submission identifier to prevent accidental duplicate submissions; this does not prove that replies come from different people.
Original replies are not shown to the owner. After collection closes with at least three replies, the owner can prepare a paraphrased digest and summary. Before processing, we remove obvious contact details. We send only the circle’s questions and replies to Cerebras, which processes the text to reduce identifying details and prepare the summary. This may involve processing outside the UK, including in the United States. Cerebras states that it does not retain inputs or outputs for its processing service; its privacy policy explains its handling of service information.
The digest groups observations by question without respondent identifiers or submission times. Summaries can contain mistakes or lose nuance. Unique wording or experiences can still identify a person, so complete anonymity cannot be promised. Do not include contact details, identifying incidents or sensitive information about yourself or someone else.
Respondents review and agree to share before submitting. There is no self-service way to edit or withdraw an unnamed reply after sending it. Contact support if you have a concern; we may need sufficient information to locate it without asking for unnecessary personal details.
Remembered moments and memory gifts
These are separate from anonymous circles. The contributor explicitly agrees to sharing their exact words and optional chosen name with the organiser and, for a gift, the intended recipient. The contribution form explains this before submission. Contributors cannot see other replies. The organiser sees submitted memories and can create or revoke a private recipient link. Anyone with a recipient link can read its current memories, so keep links private. Downloaded and printed copies cannot be recalled by us.
We store these collections in our London database. We do not send their text to a summary service. We store a hashed withdrawal key and a random submission reference; the private withdrawal link lets its holder remove a contribution from the online collection, including after sharing. Keep it secure. Small technical markers prevent removed contributions from reappearing after delayed requests and prevent a purchase credit from being reused by deleting a collection. Your private reflection on a free remembered moment is visible only to your account.
Games and payments
Games keep optional first names and deck progress in this tab’s session storage. Spoken answers are not recorded or submitted. Closing the tab normally clears the game. If you explicitly save a group, its chosen names, game settings, selected collection, favourite prompt references and revealed-prompt history are stored in your account for use across devices. Truths and dares are remembered separately. Changing collection keeps the group history; reshuffling clears the selected collection’s history and preserves favourites. Your active game remains in its browser tab. No spoken answers are stored. You can delete a group at any time. If you choose to save while signed out, this tab holds a save invitation for up to 30 minutes so it can finish after sign-in. A short server marker prevents that invitation from creating duplicate groups. We also remember whether an account invitation was shown this visit and, if dismissed, suppress it for seven days on this browser. Stripe hosts checkout and handles card details; we do not store card numbers. We keep purchase references, pack ownership, and membership status against your account. Stripe may process payment information internationally under its own privacy terms.
New experiences use one-off payments. We retain purchase references and credit-use records to provide the purchased access, process refunds and prevent duplicate fulfilment. Existing annual memberships retain their renewal terms and management controls. Ending paid editing access does not erase your writing.
Why we use this information
We use account and purchase information to fulfil our contract with you, maintain billing records to meet legal obligations, and process feedback that respondents choose to submit with their consent. We rely on our legitimate interests in securing the service, preventing misuse and responding to support requests. We do not sell your writing, use it for advertising, or make automated decisions about your education, employment or eligibility for services.
Retention, deletion and your choices
Writing and feedback remain in active storage until you delete them or request account deletion. You can clear your journal, export your writing, delete circles, remove saved tables and delete memory collections from the app. Deleting a memory collection also disables its contribution and recipient links. Deleting a circle removes its replies and summary and disables its invitation. Database backups expire after seven days; a deleted record may remain in those restricted backups until then. Service logs are retained for 14 days and do not intentionally contain journal or reply text.
For account deletion, access, correction, restriction, objection or a copy of your information, email support from your account address. We verify requests before acting and may retain payment records where legally required. You can also complain to the Information Commissioner’s Office. We explain any restriction on fulfilling a request when we respond.
Website statistics and your privacy choices
Essential browser storage supports sign-in, private drafts, game progress, checkout and remembering your privacy choices. We use basic statistics to improve this UK service, relying on the UK statistical-purposes exception for storage and access used solely for these statistics, and our legitimate interests in improving the service for the limited processing needed to produce them. The first-visit privacy panel explains this and lets you object without creating an account.
Basic statistics count page views, game starts and finishes, product views, checkout requests, cancellations and errors. We also count broad source labels (such as Instagram or a QR link), device categories and browser families. Each interaction is immediately added to separate daily totals in our London database. We do not retain an individual event log, visitor identifier, IP address, full browser string, exact referrer address or browsing history in these statistics. We do not combine these breakdowns into profiles or use them for advertising or retargeting. Obvious bots are excluded from browser interaction counts; server page-request totals can still include bots, retries and tests.
With your separate consent, detailed analytics use PostHog in the EU to connect a random browser identifier to pages and actions across visits. This lets us understand the sequence from a game or shop visit through sign-in, checkout and opening a purchase. It may include the known product, broad source, browser family, device category and payment amount. We do not send names, email addresses, writing, feedback, spoken answers, invitation links, payment references or account identifiers to PostHog. Screen recording, automatic click collection, fingerprinting and advertising pixels are disabled. Private invitation and recipient pages are excluded from both analytics tiers.
Choose Continue with basic statistics to keep combined statistics without linked journeys, or use Manage choices → Turn off statistics to stop both. Reopen Privacy choices from the page footer, or choose Pause → Privacy choices while playing. Your game stays where you left it. We remember your choice for six months using a preference cookie and, where available, local storage. A random analytics identifier is created only when you enable detailed analytics. Signing out revokes that identifier and stops detailed tracking. Withdrawing consent stops future detailed events, including delayed purchase confirmations; it does not automatically erase earlier events. For deletion help, contact support.
Daily statistical totals are kept in our database for up to 90 days and sent to PostHog as aggregate snapshots each hour. PostHog stores the aggregate snapshots and consented events under its project retention settings; contact support about retention or deletion. Payment and refund totals remain business records independently of analytics choices. Hosting providers process network information, including IP addresses, to deliver and protect the service; service logs are retained for 14 days.
A reflection tool for adults
Intraspera is for people aged 18 or over. It supports reflection and conversation; it does not provide therapy, diagnosis, clinical assessment or crisis monitoring. Skip any prompt or stop whenever you need.