Privacy

Apps, games and extensions

The apps and extensions on this site do not use their own analytics, advertising, telemetry or cloud sync. They do not read workspace source code or send prompts to me.

• Codex Quota starts the official local Codex CLI and reads its rate-limit response. The CLI handles its own authentication.
• Claude Quota reads the credentials Claude Code has already stored locally. It does not need an API key and does not refresh or upload that credential.
• GLM Quota stores its API key in VS Code Secret Storage and sends it only to the selected api.z.ai or open.bigmodel.cn host to read quota.
• Workspace Colors stores colour choices locally in VS Code.
• The browser games run in the page. Saved game state stays in the browser.

This website

The site has a small first-party, cookieless metrics collector. It records page views and dwell time using the page path, referring hostname, screen dimensions and browser language. It also uses a salted hash of the visitor IP address and user-agent to group visits into approximate visitors and sessions. The raw IP address is not stored by the collector.

Metrics are retained for up to 180 days for events and 90 days for sessions. The collector is optional from a site-function point of view and failures do not affect the pages. The site code adds no advertising cookies, accounts or third-party analytics scripts. The hosting provider currently injects a third-party performance-monitoring script; see the hosting disclosure below.

Third parties and cloud services

I avoid third-party and cloud services where I can. The unavoidable or user-chosen exceptions are:

• Website hosting: the site is served through the hosting provider. Server logs and provider security systems are outside this site code. GoDaddy also injects a performance-monitoring script served from img1.wsimg.com. This makes a third-party request and runs provider code in your browser. Its data handling is controlled by the hosting provider; we have not independently verified all of its collection. Removal requires a hosting-provider opt-out, which is pending.
• Address Matcher: this is my project running on my infrastructure. Data you submit is sent to that app for its matching workflow. It is not a third-party hosted app.
• Quota providers: the extensions contact OpenAI, Anthropic or z.ai only when you use the relevant extension. The website itself does not make those quota requests.
• Outbound links: GitHub, Patreon, documentation sites and other linked services receive information when you choose to visit them.

If a project needs a third-party service, its project page should say so.