Your media

Your files never leave your computer to reach us. MindSpiral plays what's already on your machine; nothing you load into it — no filename, folder path, or file content — is ever sent anywhere, to us or anyone else.

This website

zooburi.com keeps its own, first-party visit log: which pages get viewed, roughly where visitors are in the world (a country, guessed from IP address at the moment of the visit — the address itself is never stored, and never sent to anyone else to make that guess), what kind of device and browser was used, and which links and buttons get clicked, like a download button. On the join page it also notes whether a code you entered was open and whether you went through — never the code itself, and never the name you type. This runs entirely on our own server; nothing about your visit is shared with an advertising or analytics company. A small first-party cookie tells returning visits apart from new ones — it identifies a browser, not a person, and carries no name, email, or account. Country lookups use IPDENY.COM's IP database.

The app

MindSpiral sends Usage Insights: an anonymous id it generates for your install, the app version, platform and language, how long the app and each session ran, and counts of which features got used — for example that VR mode started, that a script played, or that forty-one images and three videos were shown. It never sends what you actually played: no filename, no folder path, no mantra or script text, no partner or paired-session identity, and nothing you typed. It is a count of what happened, not a record of what you saw.

It also reports how well the app ran and what went wrong in it: frame rate and stalls, and named problems from a fixed list — a recording that failed, a file that would not decode, a toy that dropped, audio the browser blocked. Those carry a number at most, never an error message, because a message is how a filename ends up somewhere it should not be.

When someone joins your session from a headset, a phone or a door code, the app records that a device joined, what kind it was, how it arrived and how long it stayed. The joining device never reports anything itself — it has not been asked, and your choice does not speak for it. To tell one visiting device from another without identifying it, your computer scrambles the device's id with your own install's id before sending. The result is meaningless anywhere else: the same headset joining someone else's session produces a completely different value, and there is no way back to the original. While the app is open it also says, about once a minute, what it is doing right now — whether a session is running, whether it is open to guests, and how many devices are connected, of which kind and by which route — so those numbers can be live. It is the same kind of count, and the same switch turns it off.

Some things are permanently off the list, whatever else changes. Where a wearer is looking is never recorded, counted, or summarised — not even as time spent looking at something. Neither is the live picture or sound of anyone's screen, headset view or microphone, nor who agreed to be watched or heard. Those exist only while a session is running and are never written down.

It is on unless you turn it off, and turning it off takes one click: Help → Usage Insights, any time. The app says so on first run rather than leaving you to find out. Nothing that was sent is ever tied to your name or email, because we never collect either — there is no account, and the anonymous id belongs to an install, not to a person. (Versions before 1.13 work the other way round: they send nothing at all unless you switch Usage Insights on yourself.)

Consenting-adult obligations

This site asks your age before showing anything, and the app holds partner-controlled sessions to the same consent rules the site describes: nothing reaches a wearer they haven't agreed to, and stopping always works. Those protections have nothing to do with analytics — they're checked in the app itself.

Nobody else

No data from this site or app is sold, and none of it is handed to a third-party analytics, advertising, or tracking company — the systems described above are ours alone, hosted on our own server.