Effective August 17, 2026
Trinket Box is developed by Hyperfixation Studio, a Cascade Lab project. This web app requires no account and is designed to keep your collection on your device.
Collection data
Photos, titles, and stories you receive are stored locally in this browser using IndexedDB. Trinket Box does not upload your collection to Hyperfixation Studio or Cascade Lab, and does not sell it. Clearing this site’s browser data removes the local collection.
Camera and photo access
Camera and photo-library access are used only when you choose a trinket photo or scan a room QR code. The browser controls these permissions. A received image is added to your system photo album only when you explicitly choose “Save to album” and complete the device share or download flow.
Room codes and WebRTC trading
Collectors join a temporary room using a shared code, link, or QR code. Trinket photos, titles, and stories are transferred between connected browsers through an encrypted WebRTC data channel. Hyperfixation Studio and Cascade Lab do not receive or retain the transferred trinket content.
Connection signaling
The current web experiment uses Trystero and public Nostr relays to exchange the encrypted connection information needed for browsers to find each other. Those relays do not receive the trinket photo, title, or story. As with direct peer-to-peer communication generally, connected peers and network infrastructure may be able to observe network information such as IP addresses.
Data deletion
You can remove individual trinkets from My Box. You can remove the entire web collection by clearing site data for trinketsbox.com in your browser settings. Because there is no account or server backup, deleted browser data cannot be restored by us.
Children
Trinket Box is not specifically directed to children under 13 and does not knowingly collect personal information from children.
Changes and contact
If the web app’s data practices change, this policy will be updated before the change is released. Questions can be sent through thecascadelab.com.