1. The Short Version
Apeiron is built to be quiet. We do not use advertising cookies, cross-site trackers, social-media pixels, session replay tools, or third-party behavioral analytics on apeironweb.com or on any client site we host.
The only storage we rely on is the small amount of data strictly necessary to keep you logged in to the founder dashboard, the client portal or your Box account, to remember your preferences, and — on Apeiron-owned properties (apeironweb.com, python-visuals.com) and a small set of client sites — to collect fully anonymized, cookieless page-load performance data through Cloudflare Web Analytics so we can keep the sites fast and reliable. One key is not strictly necessary: on python-visuals.com, a random key for the current tab lets our own site count how visitors move from page to page (see Section 3). It is set by us alone, holds no name, and is gone when you close the tab. The full list and the consent posture for each client site is in Section 4.
Because we set no non-essential cookies, and our one measurement key stays inside our own systems and ends with your tab, we do not show a cookie banner. This policy explains everything we do use, and how to control it.
2. What These Technologies Are
When you visit a website, that site can store small pieces of information on your device. The most common types are:
- Cookies — small text files set by a website and sent back on later visits.
- localStorage and sessionStorage — browser storage APIs that websites use to remember things between visits or during a single session.
- IndexedDB — a larger browser database, used by some apps to cache data for offline use.
- Pixels, beacons, and fingerprints — techniques for tracking visitors without traditional cookies.
Throughout this policy we call all of these "storage technologies" for simplicity.
3. Storage Technologies We Use
Here is everything Apeiron itself stores on your device. All of it is first-party (owned by apeironweb.com or by the specific client site), and all of it but one key falls into categories that the law treats as strictly necessary — meaning it is required for a service you have asked for, such as staying logged in or keeping the site working. The exception, pv_order_sk, is marked in the table.
| Key | Type | Purpose | Lifetime |
|---|---|---|---|
sb-*-auth-token |
localStorage | Supabase authentication session for the founder dashboard and client portal. Without it, you cannot stay signed in. | Until sign-out or session expiry |
soul-auth |
localStorage | Your Box account’s sign-in session on apeironweb.com (the sign-in page, your Box, and the screen where you allow an AI app). Without it, you cannot stay signed in to your Box account. | Until sign-out or session expiry |
soul_next, soul_claim |
sessionStorage | Remember which page to bring you back to after you sign in, and that you asked to link your Box to your account. | Until you close the tab |
soul_invite, soul_carry, soul_keep |
sessionStorage | On the sign-in page: a friend’s invite, the days Underword is carrying for you, or the cards you kept on the Soul page’s deck, kept until your account’s Box exists and takes them. | Until it is used or you close the tab |
soul_uw_claim |
sessionStorage | On the sign-in page: the code for today’s Underword game after you tap Keep my streak with today’s game done, kept until your account’s Box exists and takes the day. | Until it is used or you close the tab |
soul_uw_added |
sessionStorage | Set by the sign-in page once today’s Underword game is in your Box: what it gave your Onibee (its XP, its coins, and whether it grew), so your Box can show it to you once. | Until your Box shows it, or you close the tab |
soul_uw_carried |
sessionStorage | Set by the sign-in page once the Underword days you kept are in your Box: how many came across, so your Box opens on your saved progress before any setup questions. | Until you choose Explore your Box, or you close the tab |
soul_howto_seen:… |
localStorage | On your Box: that you have seen How to play, so it opens by itself only the first time. | Until you clear site data |
soul_play_days:… |
localStorage | On your Box: the last week of Underword days you played in this browser (each day’s date, the rounds you solved, and whether the day ended), so a day you left unfinished can be played again for practice. It never leaves this browser. | Each day drops after 8 days, or when you clear site data |
soul_hole |
localStorage | On your Box’s Sky: that you have opened the black hole once, so its “Tap to open” hint stops showing, and which cards you sent up have already been shown falling in. No card’s words are kept here. | Until you clear site data |
soul_coins_back |
localStorage and sessionStorage | On your Box: your Box’s address, so the checkout can bring you back to it after you buy Soul Coins. | Until your next purchase, or you clear site data |
soul_delete_resume |
sessionStorage | On your Box: that you were asked to sign in again to delete your Box, so it opens Delete my Box again when you come back. | Until you come back to your Box, or you close the tab |
cwp_shell:… |
localStorage | On your Box: which view you picked, Soul or the classic Box. | Until you pick again or clear site data |
cwp_look:… |
localStorage | On your Box: whether this browser shows Soul's earlier look, if you asked for it, or tries changes that are still being built. | Until you pick again or clear site data |
cwp_ack:… |
localStorage | On your Box: which cards you have waved away, in this browser only (the crew still sees every card). | Until you clear site data |
soul-tour-v1:… |
localStorage | On your Box: that you have seen or skipped the short tour of Soul’s tabs, so it shows only once in this browser. | Until you clear site data |
soul-sound-v1 |
localStorage | On your Box and on Underword: that you turned the game’s sounds on. Sounds stay off unless you do. | Until you turn sound off, or clear site data |
soul-calm-v1 |
localStorage | On your Box: that you turned on Reduce eye candy, so Soul moves less in this browser. | Until you turn it off, or clear site data |
cwp_sky:…, cwp_body:… |
localStorage | On your Box: saved copies of its drawings, so they are not downloaded again on every visit. The oldest are dropped when space runs out. | Until you clear site data |
cwp_bodypos:… |
localStorage | On your Box: where you just moved a drawing, until your Box has saved the move. | Until the move is saved |
cwp_fig:… |
localStorage | On your Box: where you placed its drawing and how big you made it, on the older single-drawing view. | Until you clear site data |
| UI preference keys (theme, view state, sidebar) | localStorage | Remember visual preferences such as selected tab, sidebar state, or view mode. | Until you clear site data |
| Client portal access cookies | Cookie / localStorage | Keep you signed in to a specific client portal or upload page after you enter your access code. | Session, unless you select "remember me" |
Cloudflare security tokens (e.g. __cf_bm, cf_clearance) |
Cookie | Set by Cloudflare, our hosting and security provider, to detect bots and protect the site from abuse. | Up to 30 minutes (bot management) or 30 days (challenge clearance) |
underword:v1 |
localStorage | On python-visuals.com/underword: today’s game (your moves, so a reload carries on), the days you played, for your streak, and any day you left unfinished, for 7 days, so you can finish it for practice. It leaves this browser only if you tap Keep my streak (see our Privacy Policy). | Up to 60 days of play, or until you clear site data |
underword-shot:on |
localStorage | On python-visuals.com/underword, set only when the page is opened with ?shot=1: that this browser plays Call Your Shot. ?shot=0 removes it. |
Until you open the page with ?shot=0 or clear site data |
underword-shot:v1 |
localStorage | On python-visuals.com/underword, in Call Your Shot: today’s run (the boards you were dealt and your moves, so a reload carries on), the days you played for up to 60 days, and your last 14 plays, for the end screen. It leaves this browser only if you tap Keep my XP (see our Privacy Policy). | Up to 60 days of play, or until you clear site data |
underword-board:v1 |
localStorage | On python-visuals.com/underword, set only when you tap Put me on the board: the random key that keeps your place on the weekly board, and the made-up name it gave you. The key goes to our function with each day you finish, so the day counts for you; if a day’s score cannot reach us, its date waits here until it goes up (see our Privacy Policy). | Until you tap Leave the board or clear site data; the board forgets a key after 8 weeks with no days |
soul_feed |
localStorage | On python-visuals.com/box: the cards you kept or passed on in the Soul page’s deck (each card’s id and your choice, the last 200 at most) and whether the deck has asked you to keep them in a Box, so the next card answers what you chose and a reload carries on. It never leaves this browser (see our Privacy Policy). | Until you clear site data, or tap Swipe again |
pv_order_sk |
sessionStorage | On python-visuals.com, and on our sign-in page at apeironweb.com/signin: a random key for this tab that ties a few clicks, the Website Check’s steps, the order page’s steps, the steps of a visit to the Soul page, the steps of a game of Underword, the steps of a visit to Future Sight and the steps of the sign-in page together, so we can see where visitors stop. A tap from python-visuals.com to the sign-in page carries the key in the link, so one visit stays one visit. Measurement, not strictly necessary: set by us alone, holds no name, and is saved with an order only if you place one (see our Privacy Policy). | Until you close the tab |
We do not set any cookies or storage keys for advertising, cross-site tracking, profiling, A/B testing, heatmaps, session replay, or behavioral analytics, apart from the one first-party measurement key marked above. In the Box rows, … stands for your Box, followed by a drawing’s number where the key has two parts.
4. Cloudflare Web Analytics (Cookieless)
We use Cloudflare Web Analytics to understand aggregate performance — how quickly pages load, whether the site is reachable, and roughly how many visits a page receives.
Current enrollment, as of May 20, 2026:
- Apeiron-owned properties (Cloudflare Web Analytics enabled by Apeiron's own decision): apeironweb.com, python-visuals.com.
- Externally-owned client sites with Cloudflare Web Analytics enabled (written consent from the site owner is being formalized as of May 2026; we will remove the analytics from any site whose owner declines): blueprintmedia.club, sydneyssweets.com.
- Externally-owned client sites with no analytics: blackoutmedia.org and any future client site, by default.
Cloudflare Web Analytics is explicitly designed to be privacy-first:
- It does not set any cookies.
- It does not use browser fingerprinting.
- It does not create persistent identifiers for visitors.
- It collects only aggregated, anonymized signals (page URL, country-level location, referrer, and Core Web Vitals timings).
Because there is no cookie and no personal identifier involved, this does not require consent under ePrivacy rules. If Cloudflare ever changes how this works, we will update this policy first.
Going forward, we will not enable analytics on any new client site without explicit written consent from the site owner before launch. For sites where Cloudflare Web Analytics was enabled before this policy was formalized (blueprintmedia.club, sydneyssweets.com), the respective owners are being contacted in May 2026 to capture written consent; if either declines, the analytics will be removed within one business day.
5. Stripe (Payments)
When you pay an Apeiron invoice, you are redirected to a Stripe-hosted checkout page. Stripe sets its own cookies and storage on its own domain to handle the payment and to detect fraud. We do not embed Stripe's tracking scripts on apeironweb.com itself — the redirect happens only when you click a payment link.
Stripe's cookie and privacy practices are governed by the Stripe Privacy Policy and the Stripe Cookie Policy.
6. Fonts and External Assets
apeironweb.com currently loads its typefaces from Google Fonts. When your browser fetches a font file, Google receives your IP address as part of the standard web request. Google Fonts does not set cookies and, according to Google's documentation, does not use requested font files to profile users.
We are in the process of self-hosting these fonts on apeironweb.com to remove even that minimal exposure. Client sites we build may use Google Fonts until the same migration is completed there.
Besides those fonts, apeironweb.com loads three outside scripts, each for one job: the sign-in library our sign-in service publishes, fetched from esm.sh on the sign-in page and on your Box; Cloudflare Turnstile, the check that you are a person before we email you a code, which loads with the sign-in page; and Google’s sign-in button (from accounts.google.com) on the sign-in page, which draws “Continue with Google” and opens Google’s own sign-in. Cloudflare and Google may set their own cookies on their own domains for those jobs, under the Cloudflare Privacy Policy and the Google Privacy Policy. We load no other external scripts, iframes, or widgets on apeironweb.com.
7. Third-Party Services Behind the Scenes
Some of the services that power apeironweb.com — Supabase (database and auth), Cloudflare (hosting and security), Resend (transactional email), and Stripe (payments) — may set their own operational cookies within their own infrastructure. These are strictly necessary for the underlying service to function and do not track you across other websites.
For more detail on our sub-processors, see our Privacy Policy.
8. Client Sites Hosted by Apeiron
Externally-owned client websites we build and host follow a stricter default than Apeiron-owned sites: first-party, strictly-necessary storage only, no advertising cookies, no tracking cookies, no behavioral analytics, no marketing pixels, no chat widgets. Cloudflare Web Analytics — the privacy-first, cookieless tool described in Section 4 — is currently running on blueprintmedia.club and sydneyssweets.com (consent capture in progress as of May 2026) and is NOT running on blackoutmedia.org or any other client site. If a client asks us to add anything beyond strictly-necessary storage, we will install it with the client's written consent and the client's own privacy disclosures will cover it. We will not add analytics, pixels, or trackers to a client site without that written consent on file.
9. Your Choices
Apart from the one measurement key, we only use strictly-necessary storage. To refuse that key, block site data for python-visuals.com in your browser: the home and AI Fit pages then record nothing, and the order page still works, counting its steps under a key that lasts only while the page is open. You still have full control through your browser:
- Clear site data. Your browser's settings let you delete cookies, localStorage, and other storage for a specific site or for all sites.
- Block cookies. You can block first-party or third-party cookies entirely. Note that blocking cookies will prevent you from staying signed in to the dashboard or client portal.
- Global Privacy Control and Do Not Track. We honor the intent of these signals by not adding tracking technologies in the first place.
- Private browsing. Opening the site in a private or incognito window will discard all storage when you close the window.
10. Children
Our services are not directed to children under 13. We do not knowingly collect personal information from children. See our Privacy Policy for details.
11. Changes to This Policy
If we add any new storage technology — even a strictly-necessary one — we will update this page and change the Effective Date at the top. If we ever add something that is not strictly necessary beyond the one measurement key in Section 3 (anything set by another company, anything that outlives your visit, or anything that could identify you), we will also add a consent banner and will not activate it for you until you opt in.
12. Contact
Questions about cookies or storage on our sites?
Python Visuals LLC (operator of Apeiron)
Email: [email protected]
Web: apeironweb.com