Web Privacy
Last updated: 5 May 2026
Scope. This policy covers Mind Bending Pixels web
experiments and research demos that run in a browser. For our native
apps (PsychoDeli+, OLED Fireworks), see the
app privacy policy — those apps don't
collect anything.
This policy applies to our public web properties, including:
- movies.mindbendingpixels.com — Movie-picking missions, cursor-tracking research substrate
- future.mindbendingpixels.com — Speculative scientific publishing
- mindbendingpixels.com — Brand site and project landing pages
- Other research demos linked from those domains
What we record
These sites are research substrates: small experiments that study
how people interact with content. To learn anything from them, we
record a minimum set of anonymous interaction signals.
Specifically:
- Anonymous analytics via PostHog — page views, button clicks, time on page, browser type and approximate locale (from headers; we do not lookup or store IP geolocation).
- Session replay via PostHog — a reconstruction of your visit (the rendered page, your cursor movement, scrolling, clicks). Used to understand evaluation behavior on the page in context. Form-field text is masked by PostHog's defaults; we do not turn that masking off. See the session replay section below for the full breakdown and how to opt out.
- Cursor episode geometry on movies.mindbendingpixels.com — for each on-screen result, the closest distance your cursor came, total time the cursor lingered nearby, and whether you eventually clicked. The point is to study evaluation behavior; this is an aggregate signal, not a recording.
- Click confidence — duration of each mouse press, target's visible label or text, and (on movies) a 500-millisecond window of cursor velocity immediately before the click.
- localStorage on movies.mindbendingpixels.com — your in-progress run is stored on your device only. Clearing site data removes it; private browsing prevents it.
What we do not record
- No name, email, address, or phone number — we never ask for any.
- No account, login, or password.
- No persistent identifier across browsing sessions. PostHog runs in
person_profiles: 'identified_only' mode, and we never identify you. Each visit is anonymous.
- No cookies set by us. PostHog uses memory-only persistence; data is lost when the tab closes.
- No advertising, no remarketing, no third-party trackers, no Google Analytics.
- No microphone, no camera, no clipboard reads (the prompt page reads your clipboard write only, not the reverse).
Session replay — what it captures
We use PostHog's session replay feature to understand how people
evaluate ranked content on the page. A session replay is a
reconstruction — not a video — of what was rendered in your
browser plus your interactions with it. Specifically, it records:
- The DOM (the page's structure and text content as your browser rendered it) and changes to it over time.
- Cursor movement, scroll position, clicks, and key events.
- Page URL, viewport dimensions, browser metadata.
What it does not capture:
- The contents of
<input type="password"> fields — these are masked by PostHog's defaults, which we leave on.
- Your camera, microphone, or any device sensor.
- Network request bodies (we don't enable network capture).
- Anything from other tabs, other sites, or your operating system.
Because there's no account or login on these sites and we don't
ask for personal data, the replay is anonymous: it shows what
someone did, not who they are. Replays are stored by PostHog and
accessed by us for research purposes. They are not shared with
third parties.
If you don't want to be recorded, the opt-out
steps below disable session replay along with the rest of the
analytics — appending ?ph=0 to the URL is the
simplest. Tracker blockers also stop session replay. Recording
starts only after the page's PostHog snippet loads, so a blocked
snippet means no replay at all.
Why we record anything at all
These sites exist to make published, peer-reviewable research
possible. The cursor-trajectory work behind movies.mindbendingpixels.com
is part of a body of academic work studying how people evaluate
and choose from ranked lists. Aggregate, anonymous interaction
data is the substance of that work.
Where it makes sense, anonymous samples and aggregate statistics
from these sites may be incorporated into published papers and
the open-source approach-retreat library. Individual visitors are not identifiable.
How to opt out
You can opt out at any time, in any of these ways:
- Append
?ph=0 to the URL — disables PostHog and ClickSense entirely for that visit.
- Use private browsing or incognito mode — localStorage is not persisted, and most ad/tracker blockers stop PostHog by default.
- Use a tracker blocker (uBlock Origin, Privacy Badger, Brave Shields, etc.). We do not attempt to circumvent these.
- Send a Do Not Track header — we treat it as opt-out where the browser sends it.
The site continues to work normally in all of these cases.
Data retention and access
Anonymous event data is retained on PostHog for the lifetime of
the associated research project. Session replays are retained
according to PostHog's plan-level retention (typically several
weeks to a few months) and then expire automatically.
Because we never identify you and we don't ask for personal
data, there is no per-user record to look up — each session is
anonymous.
Hosting and processors
- Cloudflare Pages hosts these sites; standard request logs apply. Cloudflare's privacy practices: cloudflare.com/privacypolicy.
- PostHog (US instance) processes anonymous analytics. PostHog's privacy practices: posthog.com/privacy.
- No other third-party processors.
Children
These sites are not directed to children under 13 and do not
knowingly collect any information from children. They contain no
accounts, no social features, and no advertising.
Changes
If this policy changes, the updated version will be posted at
this URL. We will not retroactively reduce your privacy
protections.