Privacy

SandboxVille Privacy Statement

Last updated October 5, 2026

Who we are: David Davis, doing business as SandboxVille, Zanesville, Ohio, USA. Contact: [email protected].

The short version

  • The SandboxVille app sends nothing to us. No account, no sign-in, no ads, no tracking, no usage numbers, no crash reports.
  • Your town stays on your computer. It leaves only when you turn on something that needs to talk to someone else: a cloud AI you add, or a friend's town on your WiFi. Details below.
  • Our website is different from the app. It counts visits without cookies. Details below.

1. What the app keeps on your computer

All of this is in a folder named .sandboxville inside your user folder (or the folder you pick with --data):

  • your town layout, your rooms, and each room's notes;
  • the Security Office log (a record of what happened through SandboxVille);
  • the pairing code that lets your own browser control your town;
  • the names and arrival times of AI helpers that checked in, and the short notes they sent;
  • if you add a cloud AI with your own key: that key, saved as plain text (file cloud-keys.json). Any program running under your user account could read it. Use a key with a spending limit, and delete the key on the AI company's website when you stop using it.

None of this is sent to us.

2. What leaves your computer, and only when you turn it on

You turn onWhat goes outWhere it goes
A cloud AI with your own keyYour messages to it, and the room answers it needsThat company only: Anthropic (Claude), OpenAI (ChatGPT models), xAI (Grok) or Google (Gemini), under their privacy terms and your account with them
"Start SandboxVille for friends on my WiFi"Chat lines and shared-room actionsYour friend's SandboxVille on your local network. This connection is not encrypted. Use it only on a network you trust, such as your home WiFi. In this mode SandboxVille opens a visitor door that other devices on your network can reach.
A model on your own computer (Ollama, LM Studio)Your messagesThat program on your computer. SandboxVille only allows this for addresses on your own computer (127.0.0.1, localhost).
An AI tool you run yourself (Claude Code, Codex, Cursor and others)Whatever that tool sendsThat tool makes its own internet connections. SandboxVille cannot see or stop them.

The Agent Hub shows a privacy receipt: how many requests SandboxVille's own program made since it started, and to which addresses. It counts SandboxVille only, not other programs, and starts at zero each time.

3. What the app never sends us

Your files, your notes, your AI conversations, your keys, your name, your email, your location, the rooms you use, or how you use SandboxVille. The app has no "phone home" and no update check.

4. Our website (sandboxville.com)

  • Visit counter. We count page views with GoatCounter, which sets no cookies and, by its own description, does not store personal data. The counts appear in the visitor bar at the top of the home page.
  • Fonts. Our fonts are stored on this site, so no outside font service sees your visit.
  • Hosting. The site is hosted by Cloudflare. Like any web host, it may keep ordinary server logs, such as your IP address and the page or file you asked for, for its own security and operations, under its privacy terms.
  • Downloads. The service that stores our download files may log your IP address and the file you downloaded.
  • The $9 guide is sold through Gumroad. Gumroad collects your payment and email under its own privacy policy; we receive your email address and order details from Gumroad to deliver the guide.
  • Discord. If you join our Discord, Discord's privacy policy applies, and what you post in our server can be read by its members and moderators.

5. If you email us

We keep your message and email address to answer you. We delete them 12 months after the conversation ends, unless we need them for a security report or a legal reason. We do not add you to any mailing list.

6. Children

SandboxVille is for people 13 and older (under 18 with a parent or guardian's OK). The app collects nothing from anyone. We do not knowingly collect personal information from children under 13 on our website or by email; if you think a child sent us something, email us and we will delete it.

7. How to delete everything

  1. Close the SandboxVille window.
  2. Delete the SandboxVille folder you unzipped.
  3. Delete the .sandboxville folder in your user folder. (Removed rooms sit in a trash folder inside it; deleting the folder deletes them for good.)
  4. Delete any cloud AI keys you made, on that company's website.

8. Your rights

Because the app sends us nothing, we hold no app data about you to show, correct, or delete. For anything we do hold (emails you sent us, Gumroad order details), you can ask us to show it to you, correct it, or delete it at [email protected]. We will answer within 30 days. We do not sell or share personal information for advertising. If you are in the EU or UK, we rely on our legitimate interest in running and securing our website, and on contract for guide orders; you may also complain to your local data protection authority.

9. Changes

If we change this statement, we will post the new version here with a new date and mention it in the release notes. We will not start collecting data from the app without asking you first, in the app.