For security reviewers · Effective August 23, 2026
Privacy policy
Plain language. No marketing fog. Written so an IT team can say yes. You can also watch the live upload meter.
No webcam frames have left this tab.
Video-like uploads: 0 bytes · WebRTC connections opened: 0 · Local-only is on (no account traffic).
01
Webcam
Not started. The stream is created in this tab with getUserMedia.
02
This tab
Frames go into a local <video>, then MediaPipe WASM at 5–8 fps. Landmarks never leave RAM.
03
Not the internet
No POST of image/*, video/*, or canvas blobs. Optional score JSON only if you sign in and turn Local-only off.
Full proof page — live log and offline test · IT one-pager
What never leaves the device
- Webcam frames and any derived image
- Pose landmarks, world coordinates, or skeleton overlays
- Calibration baselines (personal geometry)
- Microphone audio (we never request it)
Pose estimation uses MediaPipe Pose Landmarker compiled to WebAssembly. Inference happens in this origin. The model file is served from this app and is precached in this browser after first load so the core loop can run offline.
What we may store locally
Settings, daily score summaries, streak counters, and your Pro/trial flags live in this browser (localStorage). Export them as JSON, or wipe this browser from Settings. Clearing site data also removes them.
What an account is for
Sign-in is optional. If you create an account we store email/identity, subscription/trial status, referral codes, and optional daily score numbers (minutes, score, alert counts). We do not store video or landmarks on the server. Local-only mode disables these calls.
Third parties
No product analytics, advertising pixels, or fingerprinting scripts. Sign-in, if used, federates through the platform auth broker for Google or X, or uses email/password stored in this app's database. Camera permission is requested only when you start monitoring.
Controls
- Visible camera-on indicator while monitoring
- One-click Stop monitoring, which ends the MediaStream
- Demo mode with no camera
- Local-only toggle
- Export or wipe local scores and settings from Settings → This device
- Picture-in-picture is optional and stays in the browser
Recommended enterprise headers
This app sends nosniff, a strict referrer policy, camera-only Permissions-Policy, and a Content-Security-Policy that allows this origin and WebAssembly (`wasm-unsafe-eval`). No advertising or analytics hosts.
Deletion and contact
Settings → Wipe this browser removes local scores, calibration, and flags. Signing out does not wipe the device store. Public launch contact: hello@laptopneck.com. Use wipe plus clearing site data for a full local delete. Optional account rows (email, trial, daily scores) are removed by deleting the account, or by asking that address.
Terms and the medical disclaimer: Terms of use.