Privacy note
Draft. This privacy note hasn't been checked by a lawyer yet, and a few details are still being confirmed. It covers only the self-tracking tools on this site: Journal, Habits, Gratitude, Pulse, Affirmations and Quotes. The troll chat at chaostroll.com and the member app have their own privacy policy.
Draft of 18 October 2026
The quick version
- Accounts are optional. You can use every tool without signing up.
- No account? What you write stays in your browser. Your journal, habits, gratitude notes, Pulse check-ins and favourites are saved on this device, in this browser. They are not sent to us.
- With an account, we store your email, a password hash (a scrambled version, never the password itself) and your tool data, so it shows up on your other devices. It's stored with Cloudflare (section 2).
- Deleting the account removes it all: your email, password hash and tool data.
- No ads, no ad trackers, no cookies. We use Cloudflare Web Analytics to count visits. It doesn't use cookies and doesn't see what you write in the tools.
- Few outside services. The fonts and images are built into the page, so it doesn't load anything from Google. Our web host still sees basic visit details, like on any website, and Cloudflare counts visits (section 5).
- No account means no backup. If you clear your browser data, your entries are gone for good. The Journal has a download if you want to keep a copy.
- Shared device? Anyone who uses this browser can open the page and see your entries.
- Not therapy or medical advice. In crisis? Canada: call or text 9-8-8. US: call or text 988. UK: Samaritans 116 123. Emergency: 911 or 999.
1. Who we are
Chaos Troll by Positrolly ("we", "us").
- Legal entity: to be confirmed
- Address: 644 Lincoln Rd, Peterborough, postcode to be confirmed, England
- Email: support@embraceyourchaos.co.uk
2. Accounts (optional)
You can use every tool listed above without an account, an email address or a name. If you don't make an account, we don't know who you are, and nothing in this section applies to you.
If you make an account, here's what we store:
- Your email address. It's how you log in. We don't send you emails, and there's no mailing list.
- A password hash. Your password is scrambled with a one-way method (PBKDF2) and a random value that's different for every person. We never store or see the password itself.
- Your tool data: journal entries and ratings, habits and ticks, gratitude answers, Pulse check-ins (including notes), and your favourite affirmations and quotes, plus when each was last changed.
- Sign-ins. When you log in, your browser gets a random sign-in key. We keep only a scrambled copy of it, and it stops working after 30 days or when you log out.
- Short-term counters that slow down people guessing passwords. They hold a scrambled version of the email or internet address being tried, never the address itself, and are deleted within a day.
Where it's stored: with Cloudflare, which runs our account service (Cloudflare Workers) and its database (Cloudflare D1). The database is in Cloudflare's eastern North America region exact location and data-transfer wording to be confirmed.
What stays on your device only: the Pulse help note dates and which affirmation or quote you saw last. These are never sent.
Deleting the account: open Account (the person icon at the top), then use "Delete my account" and type your password again. That removes your email, password hash, all your tool data and all your sign-ins from the database straight away. Cloudflare keeps an automatic restore history of the database for up to 7 days, to be confirmed, after which the deleted data is gone from that too. Whatever is saved in your browser stays there until you clear it.
Forgot your password? There's no reset by email yet. If you're locked out, email us and we can delete the account for you once we're sure it's yours.
Test address: while the site is on its temporary http:// address, the page itself isn't protected on its way to you, so typing a password on it isn't fully secure yet. (Your password and data are always sent to the account service over a secure https:// connection.) Please use a password you don't use anywhere else.
3. What's saved on your device, and where
When you save something, your browser keeps it in its own storage on your device. This is called "local storage". It is not a cookie, and it isn't sent to us. Here's what's saved:
| What | What's in it |
|---|---|
| Journal | Your entries, the date, your 1–5 "chaos" rating if you picked one, and when you last changed it |
| Habits | Your habit names, the day you added each one, and the days you ticked |
| Gratitude | Your answers for each day |
| Pulse | Your energy, stress and mood numbers (1–5), your note if you wrote one, and the date |
| Pulse help note | Only two dates: the day the help note last showed, and (if you tapped Hide) the day it can show again. Never your mood numbers. |
| Affirmations | The ones you favourited, and which card you saw last (only saved after you tap to a new card) |
| Quotes | The quotes you saved, and which quote you saw last (only saved after you tap Next, Back or Shuffle) |
| Account (only if you log in) | Your email and your sign-in key, a copy of what was last synced (so changes from two devices can be combined without losing any), and a one-time copy of what was in this browser just before your first sync |
We only use this storage so the tools work: saving your entries, showing you where you left off, and keeping you logged in if you chose to. The law calls this "strictly necessary", so we don't ask for cookie consent for it.
Your Pulse check-ins and journal can hold personal things, like how you're feeling. That's why they stay on your device unless you choose to make an account.
4. Nothing you write is sent to us, unless you log in
Without an account, nothing you type is sent to us or to anyone else. We have no copy of it and we can't get it back for you.
If you log in, your tool data is sent to our account service and saved there (section 2). It's only used to show your stuff back to you on your devices. We don't read it, analyse it or share it.
These tools don't use AI. No AI reads what you write here.
5. Outside services
Being honest about this: some basic technical info does leave your device when the page loads. That's how every website works.
- Our web host (Amazon Web Services, which stores and serves this site from its Canada region) gets the normal details any website gets when you visit: your IP address, browser type, and the page you asked for. How long these logs are kept: to be confirmed. We don't use this to track you.
- Cloudflare runs our optional account service. It only gets contacted if you sign up or log in. Like any server, it sees your IP address and browser type when your browser talks to it. We've turned off request logging for this service. Cloudflare's own security logs: retention to be confirmed.
- Cloudflare Web Analytics. We use Cloudflare Web Analytics to count visits. It doesn't use cookies and doesn't see what you write in the tools. It loads a small script from Cloudflare and counts page visits, using basic details like the page you visited, your browser type and roughly where you are. We only see totals.
- Nothing else. The fonts (Bebas Neue and Inter) and images are built into the page itself, so loading it doesn't contact Google or any other company.
- The troll chat page. If you tap "Try the Troll" or "Talk to the troll", you go to our Talk to the Troll page. That page loads a chat window from LeadConnector, an outside service, and what you type in the chat is sent to it. This note doesn't cover that chat. Which privacy policy applies there: to be confirmed.
If we ever add other analytics, embeds (like videos) or anything that sets cookies, we'll update this note first, and ask for your consent where the law needs it.
6. How to delete your data
- One thing: use the Delete button next to a journal entry, gratitude entry or check-in, or Remove on a habit or favourite.
- One tool: tap "Clear my data" at the bottom of that tool. This can't be undone.
- Everything in this browser: clear this site's data in your browser settings. Look for "Site settings", "Cookies and site data" or "Clear browsing data" and pick this site.
- Your account: open Account and use "Delete my account" (section 2). If you're logged in, deleting an entry or using "Clear my data" also removes it from your account.
Clearing your browser history or site data, using private or incognito mode, or some browser clean-up tools can also delete your entries without warning you.
7. Backups and sync
- Without an account: we don't have a copy of your entries. There's nothing for us to restore, and your entries don't move between devices or browsers.
- With an account: your entries sync between the devices where you're logged in. The account copy isn't a separate backup. If you delete something, it's deleted from your account too.
- Keep a copy: in the Journal, use Download .txt or Download .json. Habits, Gratitude and Pulse don't have a download yet.
- Once you download a file, it's yours to look after. Keep it somewhere safe.
8. If you share a device
Anyone who can use this device and browser can open the page and read your entries. There's no password on the tools, even if you're logged in. If that's a worry:
- use your own device or your own browser profile,
- if you're logged in, use "Log out and clear this browser" when you're done,
- use "Clear my data" when you're done, or
- don't write anything you wouldn't want others on that device to see.
9. No ads, no selling
There are no ads or ad trackers on this site. We use Cloudflare Web Analytics to count visits. It doesn't use cookies and doesn't see what you write in the tools. We don't sell or share your data, including account data.
10. Not therapy or medical advice
These are self-help tools for your own notes. They're not therapy, counselling or medical care. Pulse is a simple record, not a test or a diagnosis.
If you're in crisis or might hurt yourself, get help now:
- Canada: call 9-8-8 or text 9-8-8
- US: call 988 or text 988
- Emergency: 911 (Canada and US) or 999 (UK)
- UK: call Samaritans on 116 123.
- Anywhere else: iasp.info/suicidalthoughts
Nobody at Chaos Troll reads your entries, even if you have an account, so we can't check in on you. Please reach out to these services directly.
11. Age
These tools are made for adults. The exact minimum age is to be confirmed. The tools don't ask for a name or age. An account only asks for an email and password, and it's optional.
12. Your rights
Without an account, we don't hold your entries, so there's nothing on our side for us to show you, fix or delete. You control them on your device.
With an account, you can see and change your data in the tools, and delete all of it yourself (section 2). You can also email us to ask for a copy, a correction or deletion. We'll answer within 30 days, to be confirmed. If you have a privacy concern, email us. You can also complain to:
- Canada: Office of the Privacy Commissioner of Canada, priv.gc.ca
- UK: Information Commissioner's Office, ico.org.uk
13. Changes
If the site changes how it handles data, we'll update this note and the date at the top. Accounts are new. Nothing is sent to us unless you make an account and tick the box to say you're okay with it.
14. Contact
- Email: support@embraceyourchaos.co.uk
- Post: legal entity to be confirmed, 644 Lincoln Rd, Peterborough, postcode to be confirmed, England