Privacy
Last updated November 1, 2026
Sona is built to work without knowing who you are. We don’t ask for your email, phone number or real name.
What we store
| Persona | Persona ID, display name, chosen character, timezone |
| PIN | A one-way hash. We can’t read your PIN. |
| Authenticator | An encrypted secret, and one-way hashes of your recovery codes |
| Browser | A hashed browser token and a label such as “Chrome on macOS” |
| Abuse protection | A keyed hash of your IP address, used to limit sign-in attempts and sign-ups. Our web server may keep ordinary access logs. |
Cookies
We use two strictly necessary cookies: one keeps you signed in for up to 24 hours of inactivity, the other lets this browser remember your persona for up to 400 days. There are no advertising or analytics cookies.
Where it lives
Data is processed and stored on servers in South Korea.
Your choices
Sign in and open Account to delete your persona at any time. That removes your account, sessions and remembered browsers. Forget a single browser from Remembered browsers.