Privacy Policy

We don't sell your data because we don't have any.

1. The short version

We don't track you as a person. We count requests to keep the service up. Your IP address is hashed with a random salt before being counted, so we literally cannot reverse it to identify you. If someone showed up at our door with a subpoena asking who hit /api/catalog at 3:14pm, we'd have to shrug.

2. What we collect

• Timestamp of each request
• Endpoint path
• User-Agent (truncated to 60 chars)
• HTTP status
• SHA-256 hash of your IP address + a random salt that rotates on server restart

3. What we do NOT collect

• Cookies
• Accounts
• Emails
• Names
• Your actual IP
• Your browsing history
• Cross-site tracking
• Device fingerprints
• Location data
• Any of that stuff

4. Third parties

None. No analytics, no ad networks, no CDNs for anything other than the hosting itself. The /api/vibe endpoint pulls public data from Yahoo Finance, Open-Meteo, and Hacker News — but only on the server side; your browser never talks to those services on our behalf.

5. Data retention

Usage logs kept for 90 days, then deleted. Nothing clever, just a cron job and a rm.

6. Contact

Questions: mike@mjonesone.com

7. Jurisdiction

California.