Privacy
What's kept, and what isn't
You don't need an account here. Nobody asks for your age, your real name or where you live.
"We" on this page means Chris Peden, who runs the Sonny Elliot site and is responsible for what it keeps. Unless it says something's public, only we can see what's described here, on the site's private admin page. Questions go to sonnyelliotinfo@gmail.com.
Looking around
Reading these pages, or playing a song on them, saves nothing about you. There are no adverts and no tracking cookies, and the music, pictures and fonts all come from this site itself.
Going into the world
Going in makes you a guest. We keep a random guest id, the name and character you chose, and when you first came and last came back. We also keep a scrambled copy of the token that proves you're that guest, and a salted hash of your connection address: a code made from your address, so that limits and bans work without the address itself ever being stored. A hash like that still counts as personal data, so it's treated as such here.
All of it is deleted 30 days after your last visit. Your name, your character, your random guest id and where it's walking are public to whoever's in the world at the same time. Nobody else can see your address, its hash or your token.
Chat
Chat is on at the moment. When it's on, what you type goes to the people near you and is never written to the database. The server holds each person's last few lines in its memory while they're here and for half an hour after, so that a report can include them and we can see what's being said if there's trouble. If nobody reports them, they're gone after that.
Reports, mutes and bans
A report keeps what the person reporting wrote, their guest id, and the name, guest id and last few lines of the person reported. A report that's been dealt with is deleted after 90 days. A mute or ban keeps a guest id, the reason and the name they had, for as long as it's needed to keep the site safe. It also keeps the salted hash of their address, so that it still works if they come back as a new guest, but only for a day: a phone network can put a lot of people behind one address.
The fan wall
A note keeps the name and message you give it and when you left it. We read every note before it goes up. Once it's up it's public until it's deleted, so please leave personal details out of it. A note we don't put up stays on the private admin page, seen by nobody else, until we delete it. The salted hash of your address and your guest id, if you have one, are kept with the note too, to limit how many one person can leave and for moderation. They're never shown, and they're forgotten after 7 days, when the note carries on without them. Ask at sonnyelliotinfo@gmail.com to have a note taken down.
The mailing list
If you join, your email address is saved on this site, with the date and which form you used. We use it to write to you now and then, and for nothing else. No mailing service is connected: letters are written by hand from an ordinary email account, so your address passes through that account's email provider when one's sent, and goes nowhere else. It stays on the list until you ask to come off: write to sonnyelliotinfo@gmail.com.
Counting
The site keeps daily totals of things like how many times the world was entered, a place was visited, a song was played or a link was tapped, and how long was spent in each place. They're only counts, with no id or address attached, so they say nothing about you, and they're kept for as long as the site runs.
On your device
Visitors get no cookies. If you go into the world, your browser's local storage keeps your guest token, name, character, settings and anyone you've blocked, so they're there next time. They stay on your device until you clear this site's data. After that you'd come back as a new guest.
Other companies
- Fly.io hosts the site on its servers in London, so everything above is stored there, along with the host's own backups, and your connection passes through it.
- Streaming services and the shop are only links. Nothing goes to them unless you tap one, and then their own privacy policies apply. Buying happens on the store's own pages, so we never see your card details.
- Our email provider carries the letters to the mailing list, and anything you write to us.
We don't sell anything about you, and there's nobody else on that list.
Children
This site isn't aimed at under-13s. Chat, when it's on, is with strangers and isn't watched live. We don't check ages. We don't ask for ages or birthdays, and the home page and the music are here for anyone without going into the world.
Your rights
The mailing list runs on your consent, which you can take back at any time. Everything else is kept because the site needs it to run and to stay safe for the people on it. You can ask to see what's held about you, to have it corrected or deleted, or object to how it's used: write to sonnyelliotinfo@gmail.com. A guest is anonymous, so tell us the name you used and roughly when. If you're not happy with how we've handled it, you can complain to the Information Commissioner's Office at ico.org.uk.
Last changed 6 November 2026.