Privacy Policy
Last updated: November 9, 2026
playhtml is an open-source library by Spencer Chang for making shared, interactive websites. Sites that use it connect to a shared server that we run, which keeps each page's shared elements in sync and saved. This policy covers that shared server and the playhtml.fun website: what they store, what stays on your device, and how to get data deleted.
If you're visiting a site someone else made with playhtml, that site's owner decides what their page shares. Sites that run their own server aren't covered by this policy.
What the shared server saves
Shared element data. When you move, toggle, sign or otherwise change a shared element, the new state is saved so the next visitor sees it. That's whatever the page stores: a position, a count, the text of a guestbook entry. It's saved under a room named after the site and page address, and it isn't linked to who made the change unless the page itself stores a name.
- This data is public. Anyone who knows a page's room name can read it, and it isn't end-to-end encrypted. Don't put anything private into a playhtml element.
- It's kept until the site owner clears it or we delete it, so a page can keep the traces of its past visitors.
What the shared server doesn't save
Presence. Your cursor, your name and color, and anything else a page shows about who's here right now are passed live to the other people on the page. They're not stored on our servers, and they're gone when you leave.
What stays on your device
The first time you visit a playhtml site, your browser makes a random ID and picks a cursor color. If you set a name, it's kept with them. They're saved in your browser's local storage for that site, so you look the same when you come back. Each site gets its own, and they aren't tied to your real identity. Clear that site's data in your browser to reset them.
Server logs
Like any website, the server sees your IP address when you connect. We don't store it with any shared data. Short-lived operational logs record which rooms are active and any errors, so we can keep the server healthy and stop abuse.
The playhtml.fun website
playhtml.fun counts page views with Plausible, which uses no cookies and doesn't track you across sites. Its pages also load fonts from Google Fonts and the star button from GitHub.
Who handles the data
- Cloudflare — runs the shared server and playhtml.fun
- Supabase — stores saved element data
Data is never sold, rented, used for advertising, or shared with data brokers.
Your choices
- Deletion requests: To have something removed, email [email protected] with the page's address and what you'd like gone. We'll remove it within 30 days.
- For site owners: you can clear your own page's data from your code (see cleaning up), or run your own server so your data never touches ours.
- No account required: playhtml never asks for an account, an email, or a password.
Looking ahead
Today your data lives on a server we run. Down the line, we want people to own their data, with playhtml syncing through open, decentralized protocols like AT Protocol. When that changes, this page will too.
Changes to this policy
If this policy changes materially, the date at the top will change too.
Contact
Questions or concerns? Reach out at [email protected].