PRIVACY · CURRENT WEBSITE

A little play.
A little privacy.

Ruin My Sandwich is a shared creation. Each contribution is stored on the server and has a public link.

Participation without an account

A first-party, HTTP-only cookie identifies this browser for up to 180 days. We store a keyed digest, rather than the cookie itself, to count contributing browsers, remember your most recent layer, enforce one contribution per UTC day and let this browser remove its contribution. Clearing cookies or changing devices loses that recognition. The player count measures contributing browsers, rather than verified people.

What becomes public

Each layer has a number, fixed ingredient, server-recorded time, and public link. Contributions persist until removed. Your approximate city and country are public by default so everyone can see where layers come from. Before adding, you can choose Country only or Keep it private. Public location information appears on the layer and its share image. We never request GPS. Without trusted coarse-location information, contributing still works and the location remains unknown. Publicly shared cities determine the city count.

When IP location is enabled, our server sends the visitor IP supplied by our trusted reverse proxy to the HBoot unified-ai platform. Its configured IP geolocation provider processes that IP to return an approximate city and country. This does not use a language model or GPS. A location preview may be requested before you choose whether to publish it. Cached results use a keyed IP digest, expire after 24 hours, and are removed by scheduled cleanup. Failed lookups are briefly cached to avoid repeated requests. Your choice controls which location fields are saved on the public layer.

Security and retention

Request limits may use a keyed digest of an IP address supplied by a trusted reverse proxy. The application does not write raw IP addresses into layer records or application logs. Daily claims and retry keys are retained for up to eight days when the scheduled cleanup runs; expired rate counters are also removed by that job. Pseudonymous contributor records remain to support public counts and ownership. Hosting and reverse proxy access logs have their own deployment retention settings.

Removing your contribution

On the same browser, open My layer, then Remove my layer. This hides its ingredient and location, invalidates its public page and image endpoint, and leaves a neutral numbered place in the tower. Removing a contribution does not restore the day’s allowance. Copies previously saved or shared outside this website cannot be recalled. If you lose the browser cookie, contact HBoot through the links below with the layer link for help; ownership may need to be verified.

Sharing and external links

Copying uses your clipboard. System sharing opens your device’s share dialog. X sharing and author links open external services with their own privacy practices. Share links identify a server record and contain no browser credential or location payload. Downloaded images use the same public record. This application currently has no advertising trackers or third-party analytics scripts.