Privacy

Last updated: 9 October 2026

Sandlab has no accounts and no sign-up. This page lists everything the site stores and why. If something here is unclear, email hello@sandlab.app.

Scenes you publish

When you press Publish, the scene data, the title you typed, a thumbnail image, the time you published and, for a remix, which scene it was remixed from are stored on our server so the gallery can show them. If you chose a display name, the name and a random creator id are stored with the scene too. That id is public: it links all scenes published under your name and powers your creator profile and the Top Creators list. It is generated in your browser and is not connected to any account, email or device identifier. Published scenes are public. To have a scene removed, email us with its link.

Votes and rate limits

To stop one person from voting many times or flooding the gallery, we store a shortened hash of your IP address (the first 12 bytes of a SHA-256 digest) alongside votes and uploads, instead of the address itself. It is used only to enforce those limits.

Usage statistics

We count a few events, such as a shared link being opened, a scene being published, a vote being cast or the support link being clicked. Each count records the event type, the website that linked to us, your country as reported by our hosting provider, Cloudflare, and, where relevant, which scene it was about. There is no per-person identifier in these counts.

Stored in your browser

Your browser keeps a few things locally so the site remembers you without an account: your display name and a random creator id if you set a name, the list of scenes you published, and which scenes you have voted for. This never leaves your device except when you publish or vote. Clearing your browser data removes it.

Advertising

Some text pages on this site, such as the articles under Learn and the materials guide, may show ads served by Google AdSense. Google and its partners use cookies to serve ads based on your visits to this and other websites. You can turn off personalised advertising in Google Ads Settings, and read how Google uses data at policies.google.com/technologies/partner-sites. The sandbox canvas, the gallery and this page never show ads.

Hosting

Sandlab is hosted on Cloudflare. Like any web host, Cloudflare processes your IP address to deliver pages and protect the site from abuse, under its own privacy policy.