A little clarity.
Invite-only beta · 28 September 2026.
This early release is for invited testers. The information below describes the current implementation, not a completed general-availability legal review. Provider arrangements and international child-privacy requirements still need review before a broader launch.
Privacy · draft
The operator is James Cazzetta, using the studio name Fiebertraum Studio. Contact details appear in the imprint.
On this device
Your journal, goals, entries, measurements, preferences and saved drafts are stored in this browser. They do not automatically sync to another device. Clearing browser storage can remove them. Exported JSON backups contain readable, unencrypted personal information; keep them somewhere safe. Restoring a backup replaces the local journal after confirmation.
Live checks are online processing
After the entry questions and your explicit acknowledgement, a typing pause can send an unsaved draft, the goal and selected earlier entries through our backend to Jev (TypeSafe AI). Entry dates, time-zone context, relevant measurements and interpretation preferences may accompany the text. They are used to interpret the goal or action and provide personalised feedback. Ordinary interface rendering does not need a Jev call.
When logging from the home screen, connection checks compare your draft with each eligible goal separately. Strong matches can be selected before you save; you can remove them or choose other goals. Tracking options can exclude a goal from automatic discovery. Saving an entry does not authorise later automatic connections. An entry connected to several goals has one shared source; changing that source updates all its connections. Removing a connection keeps the entry in Your activity. Use Delete entry everywhere to remove the shared record.
Any personal or sensitive information you include in those words can be transmitted too. Avoid including another person’s private details. On-device storage does not mean the application works entirely offline or that all processing stays on your device.
The hosted app runs on Cloudflare. Our backend processes check requests and returns results but does not persist your journal. A small Cloudflare D1 table stores only the aggregate number of admitted checks per UTC day to cap beta usage, not journal text or user identities. Older counter rows are cleaned up when a new day’s first check is admitted; infrastructure backups may retain these totals longer.
Cloudflare processes network and security information needed to serve the app. The app does not deliberately log journal bodies, provider replies, cookies or credentials. Consent attempts are rate-limited using a keyed hash of the connection IP; checks are rate-limited by an anonymous session identifier. These are security controls, not user accounts or behavioural analytics. Cloudflare’s infrastructure processing is described in its privacy policy.
TypeSafe AI
TypeSafe’s published privacy policy describes US processing and its own retention practices. No zero-retention promise is made here. The applicable customer agreement, subprocessors, transfer arrangements and retention settings must be confirmed before public launch. See the TypeSafe privacy policy and data processing addendum.
Entry permission and essential storage
The entry dialog asks for an age group, not a date of birth. The application remembers a preview choice for this browser session. For the online beta, an invite code is required before an anonymous, signed, HTTPS-only session cookie records an adult declaration and acceptance of the live-check notice. It expires within 24 hours. Rotating the invite or signing secret invalidates existing beta permissions. The invite code is not stored by the page after successful entry. This is not an account, an identity check or verified proof of age.
Under-18 visitors and visitors who decline the age question see an illustrative preview without personal-entry fields or Jev checks. This is a temporary live-feature restriction pending provider clarification and child-privacy review—not a claim that a simple declaration resolves those requirements.
No advertising trackers or optional product analytics are added. Cloudflare provides essential security and operational instrumentation. No zero-retention promise is made for infrastructure or Jev processing.
Your controls
Use Data & backups to export, restore or turn off live checks. Turning them off stops new checks from this page; it cannot recall requests already transmitted. You can delete goals and entries in the journal. Local deletion does not, by itself, request deletion from a processor.
For questions or access/deletion requests, contact beta@thusfar.me. Because the current app has no account or server-side journal, we cannot retrieve or restore your browser data. Processor-held information must be handled separately. The applicable legal bases, safeguards, processor terms, international transfers and retention settings still require review before general availability.
Imprint · draft
James CazzettaOberstrasse 159
9000 St. Gallen
Switzerland
Fiebertraum Studio is the operator’s studio name, not a separately registered company.
Beta contact and privacy requests: beta@thusfar.me. This address is forwarded by Cloudflare to the operator’s Gmail inbox. Avoid sending sensitive journal content unless it is needed for your request.
Beta terms · draft
The intended first public version is free. No payment, subscription or automatic renewal is implemented. Future admission limits or paid offers are undecided and would be explained separately; this is not a promise of permanent free access.
The application is a personal goal journal with Jev-assisted interpretation. Feedback may be incomplete or mistaken. Alignment scores describe an estimated relationship to a goal, not proof of achievement, safety, medical benefit or future success. It is not medical, financial or other professional advice.
Keep your own backups and review suggested measurements before keeping them. Beta behaviour and features may change. Nothing in this draft attempts to exclude mandatory consumer rights.
The current entry flow temporarily limits live checks to people who declare they are 18 or older and acknowledge the processing notice. A static example remains available otherwise. Appropriate support for younger users is unresolved.
Final service terms, contact information and applicable international requirements still need review before a public release.