twocities

Privacy, in plain English

What we store

Nothing about you. There are no accounts and no list of users. Your name and city are saved only in your own browser (so you don't have to type them again), and you can clear them by clearing site data.

Your camera, photos and drawings

Video, voice, photos, drawings and game moves go straight between your two devices using WebRTC, which your browser encrypts. They're never uploaded to me. Cutting you out of your background (“same place” mode) runs entirely on your own device.

Things saved on your phone

Your scrapbook, colouring pages, drawing, future flat, game score and the notes you leave each other are saved in your own browser on each of your phones, and synced directly between the two of you. Clearing the site's data deletes them.

Sharing a pose (only if you both choose to)

The one thing that can ever leave your devices is a pose outline: a flat, one-colour silhouette of your two body shapes, with no faces, background, names or location. It's only sent if one of you asks and the other says yes. It's stored on Vercel Blob, I check it before it's shown, and I'll take it down any time you ask. Ones I don't approve are deleted within three weeks.

How you find each other

To introduce two browsers to each other, the site uses PeerJS's free public connection service. It only sees a random room code and technical connection details (like IP addresses) for the few seconds it takes to connect, and never your video or photos. If a direct connection isn't possible on your network, encrypted traffic may pass through a relay server, which still can't see inside it.

Who can get into your room

Room links contain a 130-bit random code, which can't be guessed. The code sits after the # in the link, so browsers never send it to any server. The first two devices to join become the pair and the room locks, so anyone else is turned away. Each of you also checks the other, so a stranger can't take over the room by opening it first.

Counting visitors (anonymously)

I'd like to know if anyone actually uses this, so the site counts things, not people. It uses Vercel Web Analytics, which sets no cookies and doesn't identify you, and it only ever sees page paths like /room (never your room code). The site also keeps simple daily tallies like “rooms opened”, “couples connected” and “photos taken”. To count unique couples it stores a one-way scrambled version of the room code that can't be turned back into the link. It also counts which website sent people here (like “reddit” or “google”), only as daily totals per site, so I know where to say hello. Nothing about you is attached to it. If your browser sends “Do Not Track” or Global Privacy Control, the tallies skip you.

Ads

There aren't any, and nothing is sold to anyone.

Children

This is made for couples and isn't intended for children under 13.