What this website knows about you

Reading this site sets no cookies

Reading these pages sets no cookies at all. Not analytics cookies, not preference cookies, not "essential" cookies. There is no consent banner because for a reader there is nothing to consent to — under the ePrivacy rules a banner is required when you store or read something on the visitor's device, and reading this site does neither.

The one exception is described further down, and it exists only for the people it applies to: signing in to the reserved area sets one technical session cookie. If you never sign in, you never receive it — and if the reserved area is switched off, it does not exist at all.

It also runs no JavaScript. Not "minimal JavaScript": none. The pages arrive as HTML and that is the end of it, which you can check by disabling scripts and finding that everything still works.

No third-party hosts

Nothing on this page is fetched from anyone else. The typefaces — Newsreader, Inter and IBM Plex Mono — are hosted here rather than loaded from Google Fonts. Loading them from Google would send your IP address to Google on every page view, which is both a transfer to disclose and an odd thing to do on a site arguing for local software.

There is one thing the server does count, and it is described here rather than omitted: a per-page, per-day view counter, kept in the same database as the subscription list. It records the path and the date, and separately the host a visitor arrived from — www.google.com, not the search they typed. There is no cookie, no identifier, no session, no path through the site, and no column in which an IP address or a browser fingerprint could be stored even by mistake. Pages whose address contains a token are excluded entirely, and so are declared crawlers.

No analytics provider. No tag manager. No embedded video, no social buttons, no comment system, no advertising, no A/B testing tool. The content security policy the server sends is default-src 'none' with 'self' for styles, fonts and images — a browser is not permitted to fetch anything from anywhere else, and if some future change tried to, it would be blocked rather than quietly allowed.

What the server sees

Requesting a page necessarily sends the server some data, and no website can avoid this:

• your IP address, without which a reply cannot be routed back to you;
• the address of the page you asked for;
• your browser's user agent and the language it prefers;
• the referrer, when your browser sends one.

These appear in the server's request log. The log is kept for operational purposes — diagnosing errors and noticing abuse — and is not used to build a profile, not enriched with anything else, and not shared. Under the GDPR the legal basis is legitimate interest (Article 6(1)(f)) in keeping the service working and secure.

Once this site is published behind Cloudflare, Cloudflare will act as a processor for the same data at the network edge. This page will be updated with that detail on the day it becomes true rather than in advance.

The mailing list

If you subscribe, the form stores your email address, the categories you ticked, the language you were reading in, and — as proof that the consent happened — the date and the IP address of the moment you submitted it, plus the date you confirmed.

• You choose which categories you want, and none are pre-ticked.
• Confirmation is double opt-in: one email asks whether you meant it, and nothing else arrives until you open the link in it. Until then you are not on any list.
• Every message carries a one-click way out, and the same link opens a page where you can change which categories you get.
• Asking to be deleted deletes the row. Not a column marking you as gone — the record stops existing, which is also why subscribing again afterwards starts from nothing.

Ticking no categories saves nothing at all: an address with no reason to be used is a personal detail kept for no purpose.

The legal basis is consent, Article 6(1)(a), and consent you can withdraw at any moment without giving a reason.

Your rights

Under the GDPR you may ask for access to your data, correction, erasure, restriction of processing, portability, and you may object to processing based on legitimate interest. You may also complain to your national supervisory authority.

For anything on this page, write to the address below. There is no form, no account and no ticket system: it is an email address, read by a person.

What the application does

Runlix runs on your Mac. It has no account, no telemetry, no crash reporting and no usage statistics, and none of your conversations leave the machine — they are stored in a database in your own home folder.

It talks to the network in exactly two situations, both of which you start: when it searches the Hugging Face catalogue, and when it downloads a model. In both, the request goes to Hugging Face and is subject to their privacy policy, not this one.

Changes to this page

The date at the top of this page is the date it last changed. This is a young site and it will change; when it does, the change will be about something that actually became true.