privacy & cookies

What gets counted

• Google Analytics — counts visits and which pages people like, so I know whether anyone actually uses the things I build. In Europe this only runs after you say yes to the cookie banana.
• Microsoft Clarity — anonymized replays of how pages get used (where taps miss, where layouts confuse). Same rule: Europe only after a yes.
• Cloudflare Analytics — a cookieless visit counter. It sets nothing on your device and identifies no one, so it runs for everyone.
• The shop checkout runs on Shopify, which has its own privacy policy and handles payment details — I never see card numbers.

If you log in

Logging in takes one email address, and it exists for exactly one job: sending you a link to click. No password. It is not a mailing list — see below, that's a separate thing you'd have to ask for on purpose.

• Your address isn't stored. It's turned into a one-way code the second you type it, and that code is all the site keeps. I can't read an address back out of it, so I can't email you and there's nothing to spill.
• The mail itself goes out through Resend, who deliver it on my behalf and see your address in order to do that. The link is single-use and dies after 15 minutes.
• Whoever can open your inbox can open your pass. That's true of every "email me a link" login — worth knowing rather than glossing over.
• Deleting it works the other way round. Tell me the address you log in with and I can find that code and wipe the pass behind it. I just can't go from the code back to you, which is the point.

If you ask for updates

Separately from logging in, you can ask to hear when a new area opens. Two different things, on purpose:

• You have to opt in, and then confirm it. I send one mail asking "did you mean this?" — until you click it, you are on no list at all. Nobody gets added because they logged in once.
• This one does store your address, because there's no way to send you anything otherwise. It lives with Resend, who deliver the mail, and nothing else is kept beside it.
• Every mail has a one-click unsubscribe, and it's honoured immediately. No "are you sure", no login required.
• What you're agreeing to, in full: new areas, new features, items and wearables, fixes worth knowing about, and occasionally new merch. No schedule, no drip, and your address is never sold or handed to anyone.

What stays in your browser

Your built banana, bananacoins, badges, and pass live in your browser's own storage (localStorage) — that's your save file, not tracking. It never leaves your device unless you log in to carry it elsewhere, and even then it's only readable by you and me.

Your choice

Checking your current choice…

Changes apply from your next page load. The banner only appears for visitors in Europe — that's where the cookie rules apply.

Things you make here

The workshops are free, and everything approved from them is free for everyone in Banana World to wear or place. In return, what you make with them belongs to Banana World: it can appear in the world and on things we sell, and your name stays on it wherever it goes.

Questions?

Write to me — it goes straight to the banana guy.