Little Shop privacy
Updated September 13, 2026
Little Shop is a scene editor for creating and sharing a cozy streaming room. This page describes the data handled by the current app.
Your account
Email accounts store an email address and a salted password hash. Google sign-in requests basic profile and email permissions. The app stores your Google account identifier and email address to recognize your account; it does not request Gmail, Drive, contacts or calendar access. Google access tokens are used during sign-in and are not saved as ongoing access to your Google services.
Your shop
The app stores your scene, uploaded images and audio, PNGTuber settings, replacement frames and projector settings so they can load on another visit. Editing requires an account. Publishing creates a public snapshot that can include names, pictures, audio and projector links in the scene. Private changes do not update that snapshot until you publish again.
Unpublishing prevents future access through the public shop address. It does not recall material someone has already viewed or downloaded. Previously stored snapshots may remain in storage until removed by the operator.
Microphone and embedded content
When you enable the microphone, the browser analyzes volume locally. The app sends a volume level and timestamp for animation, not a recording of microphone audio. Uploaded music files are stored separately as part of your scene. YouTube videos and external websites embedded in the projector connect your browser to those services, which apply their own privacy practices.
Sessions and hosting
Essential secure cookies keep you signed in and protect login requests. Sessions expire after 30 days; logging out revokes the current session. Authentication rate limits use hashed email and IP identifiers with time windows. The app runs through Sites hosting and Cloudflare, which process network requests and operational logs. Stored shop data uses Cloudflare storage.
Your choices
You can export a backup, change your scene, disable microphone access, unpublish your shop and log out. Saved account and shop data remain until removed by the operator. To request account or stored-data removal, contact nyxtom@gmail.com. You can also remove the Google connection in your Google Account settings.