1 in 8 Billion · lifelot.nategu.com
Privacy policy
1 in 8 Billion has no accounts and is built not to ask for names or contact details. This page sets out everything we do handle, why, and where it is kept.
Effective: October 29, 2026 · Controller: Nate Gu & Co LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA · developer@nateguco.com
1. What we handle, why, how and for how long
Life records (the life you are living, past lives and their full records, your notes, settings, recent problems on this device)
- Purpose
- Continuing a life, reopening past lives, reporting a problem
- How it is kept
- On your device (browser storage). Part of a life reaches our server only when you choose: when you share it, make a share link (the country, age and sex in the simulation are in the link), move your lives to another browser or phone, or use the keepsake features below
- How long
- Until you clear the site data in your browser (some browsers, such as Safari, clear data of sites not visited for a while on their own)
Anonymous usage statistics: kinds of screens and actions (a life begins or ends, etc.) with details from the simulation (birth country, the country lived in now, age, auto mode, speed, the world chosen), how you arrived (link source, in-app browser type), device type, and a random number made fresh for each tab
- Purpose
- Understanding use, finding errors, the "living now" view and figures on the first screen
- How it is kept
- Kept as daily totals. The random number and the tab's current state are used only for the "online now" view and change on reload. No cookies, advertising IDs or IP addresses are stored. Your country of access is read from the connection only to hide the pass where it is not sold, and is not stored
- How long
- Daily totals for 120 days; the "online now" view forgets a tab within 20 minutes of its last signal
Script error reports: version, where the error happened and a short fingerprint (no error text, no address)
- Purpose
- Fixing errors
- How it is kept
- Daily totals
- How long
- As above
Shared lives (optional): the simulation's story of that life (its name, country, age, sex), your words (up to 300 characters), language, time posted, "remember" and report marks, and a random key for deleting your post (only its hash is kept on our server; the key itself stays on your device)
- Purpose
- Sharing lives with others; quoting them, without saying who wrote them, in posts introducing 1 in 8 Billion
- How it is kept
- Public. Contacts, links, anything that looks like a school or an address, and insults are filtered out automatically, but no filter catches everything, so please leave out real names and anything that could identify you
- How long
- Until you delete it (it is removed from the site at once); a post hidden by reports is kept so we can decide whether to restore it, until you delete it or ask us to
Feedback (optional): kind of feedback, your text, play details (version, language, details of the current life in the simulation, the current screen, device type, recent problems on this device as short codes) and a nickname (optional)
- Purpose
- Fixing errors and improving the service
- How it is kept
- Stored on our server (Cloudflare) and read by us. Please do not write names or contact details
- How long
- Deleted within a year after it is handled
Email (optional): your email address and message
- Purpose
- Replying, handling payments, refunds and problems
- How it is kept
- In our company mailbox (developer@nateguco.com). If you write through "Report a problem", the version, device type, the state of your current life and recent problems on this device are filled into the message, and you can read and delete them before sending
- How long
- Deleted within a year after it is handled; payment and refund questions may be kept up to 3 years in case of disputes
Moving my lives (optional): the life records in this browser, the numbers and take-down keys of memorials put up from this device, and whether this browser has a keepsake pass (the pass key is not sent)
- Purpose
- Moving your lives to another app's browser or a new phone (instead of a login)
- How it is kept
- Kept briefly on our server under a random code that works once. Nothing that says whose records they are (an account, an email, an IP address) is stored with them. Anyone holding the code can take them, so do not send it to anyone else
- How long
- Deleted as soon as they are taken, or after 3 days
Keepsake pass (optional): the payment notice Stripe sends us when a payment is done (of which we keep only a one-way hash of the email address, the payment number, the amount and currency, and whether it was refunded), the email you type to open the pass on another device (compared as a hash, never stored), when the pass was first used, and a pass key (kept on your device)
- Purpose
- Issuing and checking passes, refunds
- How it is kept
- Our server never stores email addresses: they are turned into a one-way hash and compared. Payment numbers are used only to avoid issuing a pass twice and to handle refunds. We never receive card or other payment details; payment records (email included) stay with Link and Stripe under their policies, where we can see them in our Stripe account
- How long
- For as long as the service runs, so your pass keeps working; deleted on request (the pass then stops working)
Devices opened by email (keepsakes): a random device number the browser makes for itself when you open the pass by email
- Purpose
- To check that one pass opens by email on no more than 5 devices in 30 days
- How it is kept
- On our server with the pass; it holds nothing that identifies a person or a device
- How long
- Deleted 30 days after that device last opened the pass by email
Memorials and the House of Past Lives (keepsakes, optional): what you put in a memorial (the name, country, age and sex in the simulation, the scenes and words you chose, your notes and farewell, its cover and decoration, title and captions, the things that life had), a random key for taking it down (only its hash is kept on our server), candle and report counts, the fixed words visitors chose (never who left them); how each room is decorated, the house name and whether it is open
- Purpose
- Running memorials and the House of Past Lives
- How it is kept
- Public (a house only once you open it). Films, albums and record books are made on your device and never sent to us
- How long
- For as long as the service runs; a memorial taken down from the device that made it is deleted at once; one we took down is kept so we can decide whether to restore it; deleted on request
Keeping past lives on the server (keepsakes, on from the start, can be turned off): the life records of a browser where it is on
- Purpose
- Bringing them back by opening the pass again after the browser's data is cleared, or in another browser
- How it is kept
- Compressed on our server (Cloudflare), only the latest copy of each browser, under the pass and a random number each browser makes. No email or IP address is stored with it. Nothing is sent while it is off
- How long
- While you have the pass; deleted at once when you turn it off or the pass is refunded
Carrying a life to another browser (keepsakes, optional): the whole record of that life
- Purpose
- Moving a life from an in-app browser to Safari or Chrome
- How it is kept
- Kept briefly on our server under a random address that opens once
- How long
- Deleted as soon as it is taken, or after 3 days
Abuse prevention: a one-way hash of your connection's IP address mixed with a secret that changes every day
- Purpose
- Limiting how often posts, reports and pass checks can be sent, so the service cannot be flooded or abused
- How it is kept
- On our server; the IP address itself is never stored, and hashes from different days cannot be linked
- How long
- Rate counters: until the counting window ends (at most one day). To count each visitor's "remember", candle or report on a post or memorial only once, that day's hash is kept with the post or memorial for as long as it exists
Cloudflare, which serves the site, processes connection data such as IP addresses for delivery and security, and keeps short technical logs of a small sample of requests (which may include connection data) for troubleshooting, for up to 7 days. Fonts are served from our own domain, so opening the page sends nothing to other companies.
Legal bases (where the GDPR applies): our legitimate interest in running, securing and improving the service (anonymous statistics, error reports, abuse prevention); performing our contract with you (the keepsake pass); your choice to use an optional feature (shared lives, feedback, email, moving lives, memorials).
2. Sharing
We do not sell personal information or give it to third parties, except to the service providers below or when required by law through due process.
3. Service providers and international transfers
We use the services below, and information moves to the USA and other countries in the process. They protect transfers under their own safeguards (such as the Data Privacy Framework and standard contractual clauses).
Cloudflare, Inc.
USA (data centers worldwide) · cloudflare.com/privacypolicy
- Information
- Everything our server keeps (section 1) and connection data
- Purpose
- Hosting the website, server and database, backups against failures (section 5)
- How long
- As listed above
Stripe, Inc. and its affiliates (including Link)
USA and elsewhere · stripe.com/privacy · payment help: support.link.com
- Information
- What you enter at checkout when you buy a keepsake pass, and the payment number we send when we refund
- Purpose
- Selling the pass: Link, run by Stripe, is the merchant of record and handles payment, taxes, receipts and payment questions under its own policy; preventing fraud
- How long
- Under Stripe's policy
Our email provider
for developer@nateguco.com
- Information
- Emails you send us
- Purpose
- Receiving and keeping email
- How long
- As listed above
To avoid these transfers: shared lives, feedback, email and keepsakes are optional. To turn off anonymous statistics too, enable "Do Not Track" or Global Privacy Control in your browser; the site then sends no statistics signals (the first-screen view may show no other lives). Everything else works the same.
4. Children and teenagers
We do not knowingly collect personal information from children under 14 (16 in some countries). Please do not write names, contact details, schools or where you live in shared lives or feedback; we try to filter such details out automatically, though no filter catches everything, and if we learn that a child's personal information has reached us, we delete it. The keepsake pass must be paid for by an adult; minors should ask a parent or guardian to pay. If a minor paid without a parent or guardian's permission, write to developer@nateguco.com for a refund.
For parents and guardians. 1 in 8 Billion is a life simulation made for ages 15 and up. It lives one person's life by real statistics, so death, illness, war and poverty, drinking, smoking, gambling, prison, violence at home and early marriage happen as they do in reality, and a past world tells of real history such as wars and mass killings. Drug dependence in adult lives, and sexual violence from age 15, also happen as often as the real statistics say, never shown in detail or how, always with where to find help, and never on shared cards or memorials (suicide happens from the teenage years on, as often as the real statistics say, never showing how or why, never named on shared cards or memorials, and always with where to find help). Players cannot talk to or contact each other, there are no ads, and paying never changes a life in the simulation. For players under 15, consider trying it together; questions are welcome at developer@nateguco.com.
Classroom mode. Teachers who want to use it in class can open classroom mode from 'Open in classroom mode' at the bottom of the first screen. A browser opened that way holds back content by our own guideline of ages 12 and up and turns off shared lives, feedback, problem reports, moving records, keepsakes and memorials. So in classroom mode no names, contact details or pupils' words reach our server. Only anonymous statistics that identify no one are sent, and not even those if the browser has "Do Not Track" or Global Privacy Control turned on.
5. Deletion
Information is deleted without delay once its period ends or its purpose is met.
Copies against failures. So that nothing is lost to a failure or a mistake, our database provider (Cloudflare) keeps 30 days of changes so the database can be restored to a point within them. So a post or memorial you delete or take down is gone from the site and the server at once, and from these copies within 30 days. They are used only to bring back records lost to a failure or a mistake.
6. Your rights
You can ask to see, correct or delete your personal information, or to stop or object to its processing: write to developer@nateguco.com. We reply within 30 days, usually much sooner.
You can delete a shared life yourself from the device you posted it on. A memorial can be taken down from the device that made it. Life records on your device disappear when you clear the site data in your browser. Anonymous statistics are totals that cannot identify anyone, so one person's part cannot be singled out.
You may also complain to your data protection authority. If you are in Brazil, you have the rights of Brazil's General Data Protection Law (LGPD), exercised the same way, and may complain to Brazil's data protection authority (ANPD). If you are in California, we do not sell or share personal information for advertising.
7. Cookies and similar technology
We set no cookies (Cloudflare, which delivers the site, may set a strictly necessary security cookie, and the checkout uses cookies under Stripe's policy). Life records and settings are kept in browser storage (localStorage and IndexedDB) and leave your device only as set out in section 1. You can block or clear site data in your browser settings; continuing a life and past lives then will not work.
8. Security
All connections are encrypted (HTTPS), we handle only what is needed, IP addresses are not stored, the admin page needs a secret key, and a content security policy blocks outside scripts. Our server handles email addresses only as hashes.
9. Contact
Nate Gu & Co LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA · developer@nateguco.com (privacy, payments, refunds and anything else)
Bugs and ideas: 'Send feedback' on the first screen
10. Changes
If this policy changes, we announce it on this page and in the update notes that day, and changes that work against you, such as handling more information or sharing it with more providers, at least 7 days before.
Ready to be born again?
Be born