Anonymous session and local drafts
The server stores an irreversible hash of a random session cookie, the pinned scenario version, necessary attempt and order state, and bounded coarse events. It does not write a full IP address to D1.
Detailed plans, review notes and preferences remain in localStorage on the current device until the user clears them. Free text is not uploaded automatically. Bars, unrevealed paths and authoritative order or fill state are not stored in localStorage.
Retention and security boundary
The Production service applies a 30-day logical retention policy to anonymous sessions and raw D1 runtime records. Cloudflare security logs and D1 Time Travel or backup data follow the platform retention boundaries that apply to the deployed service.
Cloudflare may process IP and device information and necessary logs for delivery, security, abuse prevention, reliability and troubleshooting.
Turnstile
When a human-verification challenge is required, Cloudflare Turnstile is used. The verification response is checked only by server-side Siteverify and is not written in plaintext to logs, D1 or an idempotency response.
External platforms
WeChat, X and Instagram apply their own privacy, cookie and data-processing terms after a user leaves landuth.com. LDTH does not embed their feeds, pixels, SDKs or login components.
Privacy contact
Privacy questions can be sent to [email protected].