PRIVACY · OPEN SHELF

Privacy

This machine sets no cookies and loads no third-party scripts. What it keeps, it keeps in your own browser unless you choose to sign in — and this page names every item on both sides.

THIS SITE SETS NO COOKIES. It loads no tag manager, no advertising pixel, and no script from anyone else’s server. Signing in does not set one either: the session lives in your browser’s local storage, listed below, and signing out removes it. It does count visits now, and a paragraph below says exactly how. There is no consent banner because nothing here needs one: the counting sets no cookie and keeps nothing in your browser, and a banner for something that needs no consent would teach you to click through a dialog that meant nothing. A check runs on every build and fails it if any page on this site loads a script, stylesheet, image or frame from a host that is not ours — that sentence is defended by the build, not by our good intentions.

WHAT IS KEPT, AND WHERE. Twelve things, all of them in your browser’s local storage on this device, none of them sent anywhere: your bit balance; your sound preference; the theme you chose; your best game scores; whether you have dismissed the log-in nudge; whether you have seen the boot screen; whether you have seen the desk before; whether you have seen the note about the F1 help key; which desk note you have put away; any stamps you have collected; which backup codes you have already restored here, so the same code cannot be counted twice; and whether you have asked the machine to date everything 1992. If you sign in, three more, and only then: your session, which proves to the account server that you are you and is removed when you sign out; the balance this machine last banked to your account, so the same bits are never counted twice; and, only while a sign-in link is on its way, a one-time value that proves the link was asked for from this browser. Clear your site data and every one of them is gone, along with any bits you have not banked — which is what the backup code in the Bit Bank is for.

WHAT LEAVES YOUR MACHINE. Every tool says where it runs, on its own page — that line in the footer is a rule, not a slogan. Tools on the open shelf do their work in this browser: the resizer, the compressor, the format converters, image-to-pdf, the QR and password generators, the word counter and the case converter. A file you hand to one of those is read by the page you are on, and there is no server in the transaction, so there is nothing for us to retain, sell or lose. The Power Shelf is the other half of that sentence: those tools do not exist yet, and when they do they will send your file to a server because that is the only way the job can be done. When that happens this page will say what is sent, how long it is kept, and how to delete it — before the first one ships, not after.

WHAT IS COUNTED. Since 0.42.0 this site counts page views and measures how its pages perform, using our host’s own analytics served from our own address — nothing is fetched from anyone else’s server to do it. For each view it records the page you viewed, the page that sent you here, your country and city, your device type, browser and operating system, and how fast the page loaded: how long the largest thing took to appear and how much the layout moved while it did. Our host tells one visitor from another within a day by a hash of the incoming request, computed on their side and discarded after twenty-four hours; nothing is stored in your browser to do it. What is not collected: no cookie, no identifier that follows you to another site, no profile, and it is never joined to an account. We do not know who you are. We know that someone was here, and roughly where from.

WHAT WE CANNOT SEE. Beyond that count, nothing. Our host records the ordinary things a web server records in order to serve a page — an IP address, a user agent, a timestamp — and we do not add anything to that, query it, or join it to anything else.

ACCOUNTS. Since 0.43.0 you can sign in, with a link sent to your email and no password, because there is no password to have. It is never required to use a tool on this site, and no tool asks. An account holds exactly two things: your email address, and three numbers — your bit balance, which themes you have, and which stamps you have earned — so they follow you between machines. It does not hold what you converted, what your files were called, which tools you used or which pages you read, and those numbers are shown to nobody but you: there is no leaderboard and none can be built on them. The account lives with Supabase, the company that runs our sign-in and database, at gbrhvdogikfyxazvvjpe.supabase.co in the United States. That is the one address other than ours this site ever contacts, and it is contacted only when you ask for a link or are signed in; a visitor who never signs in never reaches it. Sign-in emails are sent by Supabase on our behalf. Two buttons in the Passport window finish the job: EXPORT MY ACCOUNT hands you a file with everything the account holds, and DELETE MY ACCOUNT deletes the account and everything in it at once, after offering you a backup code so your bits can outlive it.

CHANGES. If this page changes in a way that matters, the change is listed on the changelog with a date, like everything else on this site.

A HUMAN. Questions, corrections and anything that looks wrong: garrett@201lab.com.