MindSpiral is a hypnosis player made for consenting adults, and the pages behind this describe exactly what it does. Confirm you’re 18 or older — or the age of majority where you live — to carry on.
No pornography on this site — only MindSpiral itself, running. Your answer is remembered on this browser, and counted — anonymously — in our own visit log.
Anonymous by design
Hosts and guests meet through a doorman that forgets. No accounts. No IP addresses kept — not by the app, not by us. No location hiding in your photos. Here’s exactly how, what we test, and the few things no app can promise.
How a guest reaches a host
A guest types a code, and zooburi.com hands them the way in — then forgets they asked. Everything after that travels through an encrypted tunnel that hides where each end really is.
Sees the name the host chose to go live under, the room’s title, and what the host shares. Never the host’s address, their computer’s name, or where their photos were taken.
Erases the guest’s address and country the instant a request arrives. Shows the guest’s nickname live — and never writes it down.
zooburi.comThe doorman: swaps a code for the way in, keeps no address, and hands a guest a pass that works once and expires in 15 minutes.
Who learns what
Every piece of a session was checked for what it gives away, and to whom. This is the whole list.
Between host and guest
The tunnel hides each end from the other. When a guest arrives, the host’s computer is told where they connected from — and MindSpiral erases it on the spot, before anything can write it down.
The name a guest types lives in the room, live, and nowhere else. The host’s record of the night says “guest” and a few random letters — and forgets the lot after fourteen days.
Macs name themselves after their owners. A guest from anywhere only ever sees the name the host chose — never the computer’s own name, or its addresses on the home network.
Photos and clips remember where they were taken, the phone that took them and when — sometimes a thumbnail from before the crop. MindSpiral wipes it all from every file a guest receives, without touching a single pixel or note.
Record your own session and the file stays on your own device. It is never sent to the host, and the host’s computer refuses it if anything tries.
A session joined from anywhere installs nothing and remembers no host address or words on your device — and when you head off to another session, it tells your browser to wipe everything it kept. For no trace at all, join from a private window.
zooburi.com
Our service opens the door and steps back. Pictures, sound and names travel between the two computers — never through us — and what we do keep is built to be useless to anyone looking for a person.
To stop floods, the door counts requests under a scrambled key that changes every day. The address itself is never written down, and the counts are thrown away as soon as they stop mattering.
A join link carries its code after the # — the one part of an address your browser never sends to a server. So not even our web host’s logs can say which session anyone joined.
A host has no lasting identity with us until they choose a name to go live under. Change your mind, and one press erases your name, your note and your followers — your computer starts again as nobody.
Following a host takes no name and no email. Pings are encrypted so only your browser can read them, and a host only ever sees how many follow them — never who.
The way in is a signed pass that opens the door one time and expires in fifteen minutes. Copied, forged or late, it opens nothing.
No advertising, analytics or tracking company anywhere — not on this site, not in the app. Our own fonts, our own scripts, and a browser that is told to load nothing from anyone else.
Locked against the web
A session is a private room on your own computer. We checked every way another website, another device or a guessing machine could reach into it — and shut each one.
A session only answers pages MindSpiral served itself. No other website — not even one open in a browser on the same computer — can connect to it, change a folder or take the controls.
The session page refuses to sit inside another site, sends no referrer when you click away, and tells the browser it may never ask for your location or camera.
Everything a session shows is marked private, so nothing along the way — not even the tunnel’s own cache — may keep a copy of it.
Ten wrong codes lock a guesser out. A flood of them from many addresses locks the door for everybody for a while, so switching addresses gets a guesser nowhere.
On a hotel’s, a dorm’s or an office’s network, one switch hides your computer from everyone around you — while the people you invite from anywhere still walk straight in.
MindSpiral only installs an update carrying our signature — checked on your computer, against a key built into the app, before a single byte of it runs.
Straight talk
Trust is built on the parts we can’t fix as much as the parts we can. Here they are.
The tunnel’s operator can see the traffic. Cloudflare carries the tunnel and, like any network in the middle, can see who connects and what passes through — and the tunnel program may tell it your computer’s name, so if yours carries your real name, rename it. Want your address hidden from Cloudflare too? Use a VPN; it works for hosts and guests alike.
A host’s computer runs the session. MindSpiral erases what could identify you the moment it arrives — but someone running a modified copy could keep what reaches their machine. Join hosts you trust, and keep your nickname a nickname.
Our web host keeps ordinary server logs for a short while, as every web host does — the address a request came from and the page it asked for. We made sure nothing in them says which session anyone joined: no codes, no names, no hosts.
The app counts, anonymously. Usage Insights tells us which features get used — never your files, names or anything you typed, and never tied to a person. Switch it off any time: Help → Usage Insights.
Proved, not promised
Before a release can ship, automated tests plant real GPS and camera tags in real photos, clips and songs and check none come out the other side — then attack a real session from another website, through a fake tunnel and with a flood of guessed codes. If one promise on this page stops being true, the release stops with it.
MindSpiral