Read in English · Privacy notice
Who looks after your data
Munifest is operated by Xyren Co., Ltd. Contact hi@munifest.world about your personal data. This notice describes the current service, updated 4 November 2026.
What we collect and why
Starting a ritual creates an account identifier and a session cookie so you can return to that account. We keep activity dates, the selected arrangement and ritual progress to provide the service. A display name and recovery code are optional. Your intention and reflection are sent to account storage only when you choose to save after the ritual. Please use general intentions and avoid sensitive details, such as health or religious beliefs, and other people’s personal information.
What other visitors can see
Visitors in the same room see your randomly assigned character, position, direction, walking and Wai pose through the live connection. The character does not identify your actual gender or personal details. Movement messages do not include your intention, account identifier or account display name. Your character may appear in screenshots or videos made by other visitors. If you later use a shared effect and choose to show your name, that display name will appear in its announcement.
Voice, video and sharing
We do not activate the microphone or record what you say. Videos are made on your device and hide intention text by default. You choose whether to reveal it. The service may retain a sharing record, such as its type and date, but does not upload the video file to Munifest storage. Sharing elsewhere is also subject to the settings and policies of the app you choose.
Cookies and device storage
The munifest_session cookie provides account access and lasts up to one year. Your language choice stays in browser storage until cleared. When purchases are available, a checkout draft is kept in temporary tab storage and can be resumed for up to one hour. We currently do not install advertising cookies or marketing trackers. Clearing cookies may remove access to your existing account unless you have its recovery code.
Service providers and security
Cloudflare hosts the site, database and online rooms. Technical information, such as IP addresses, requests and errors, is processed to deliver the site, prevent abuse and protect the service. Network infrastructure may process data outside Thailand. Support emails also pass through our email provider. Payments are currently disabled. We will update payment-provider information before enabling checkout.
Why processing is necessary
Necessary information supports the service you request, including account access and shared visitors. Necessary technical information supports security and legitimate service-operation interests. Saving an intention, choosing a name and revealing text in a video are optional. Entering the shrine is not consent to marketing or promotional messages.
How long information stays
Accounts and saved intentions remain available for return visits until a verified deletion request is handled. Saved intentions do not currently expire automatically. Sessions expire as described above. Position data is used during the connection; we do not build a movement history. Security logs and records required by law can have different retention needs. Before purchases open, we will specify transaction-record retention.
Your rights and requests
Email hi@munifest.world to request access, a copy, correction, deletion, restriction, objection, withdrawal of consent where applicable, or portability where the law provides it. You may also complain to Thailand’s Personal Data Protection Committee. We may need to verify account access before acting. Do not email your recovery code. Clearing browser cookies alone does not delete account records on the service.