Trust Center

Security architecture

Each game ships as one self-contained HTML file. All code, styles and art are inline. Nothing is fetched at run time.

• Every file declares a Content Security Policy of default-src 'none' with connect-src 'none'. The browser itself refuses any network request, even if code tried to make one.
• No external scripts, fonts, images, frames or style sheets. No CDNs, analytics or advertising.
• No chat, messaging, accounts, logins, user-to-user features or free-text entry.
• No hyperlinks to the internet. The only navigation is between games in the suite.
• No downloads, file access, camera, microphone, location or other device permissions.
• An automated check runs on every build and fails it if a file contains network APIs, external URLs, syntax too new for older WebViews, or a missing security policy.
• Every build is also played start to finish by an automated test with all network access blocked. The build fails if any request is attempted or any error occurs.

You can check this yourself: open any demo, turn off Wi-Fi, and keep playing.

Content standards

The suite is written to pass correctional publication review, including Washington DOC's publication review standards, without special exceptions.

• No violence, weapons, drugs, contraband, nudity or sexual content.
• No escape themes, security bypasses, maps, floor plans or layouts.
• No real or invented gang names, colors, signs or symbols.
• No contempt for staff or any group. No profanity or slurs.
• Trauma-informed feedback: no red error flashes, buzzers or shaming messages. Mistakes fade gently and play continues.
• Calm sound design built from soft synthesized tones, with mute on every screen.
• Reflections written at about a 5th-grade reading level, welcoming to every player.
• Cultural content is researched and reviewed for respect and accuracy, avoiding stereotypes and the misuse of sacred practices.

Data and privacy

The games collect no personal information. Progress is saved in the tablet's local browser storage so it survives restarts and sync cycles.

For approved research or program evaluation, we can add an aggregate, de-identified export that the facility controls, under a written data agreement. It is off in all current builds.

Device compatibility

Accessibility

• Touch targets of at least 72 pixels, with generous spacing to prevent mistaps on worn screens.
• High-contrast text on deep backgrounds for dim, scratched displays.
• Color is never the only cue: color buttons also carry names, icons and number keys.
• Pause at any time. The game clock stops, and a breathing prompt appears.
• Reduced-motion preferences are respected.
• Short sessions with plain-language instructions and a how-to screen for every game.

Claims and evidence

The brain-training industry has a history of overstated claims, including a federal consumer-protection settlement against a major brand. We are deliberately conservative.

• Each game uses an established exercise from cognitive science, such as Stroop, flanker, n-back, task switching, spatial span or useful field of view.
• We claim structured practice of specific skills, not broader cognitive gains, illness prevention or treatment.
• The suite is not a medical device and does not replace counseling, programming or clinical care.
• Psychoeducation content draws on cognitive-behavioral skills and culturally informed approaches to Asian American and Pacific Islander mental health, and is written to support, not deliver, therapy.
• We welcome independent evaluation and will help design pilot measures with agency research staff.

Code and supply chain

• No third-party code runs in the games. The only libraries are build-time tools on our machines, and none ship to the tablet.
• Source code is available to agency reviewers under a confidentiality agreement.
• Builds are reproducible: the same source always produces the same files, and we can supply hashes for every release.
• Each release has a version, a change log and a review record.

This website

We hold our own site to the same standard. It sets no cookies, runs no JavaScript outside the game demos, loads no third-party fonts, scripts or trackers, and is served with strict security headers. Our fonts are open-source Noto typefaces, hosted here. Contact happens by email, so no form data passes through us.

Documentation on request

We can provide any of the following for your review:

• Technical security attestation: offline operation, no data collection, no communication features
• Full source for each game, with build and check scripts
• Content summary for each game: all on-screen text, imagery descriptions and cultural sources
• Release hashes and change logs
• Capability statement and company documents for vendor registration

Request documentation