— Privacy invariants
What we never do.
- No cookies. No
localStorage. NosessionStorage. - No fingerprinting. No third-party tag managers.
- No raw IPs persisted — hashed, geo-resolved, discarded.
- Daily rotating salts. Same visitor, different hash each day.
- SHA-256+ only. No SHA-1 or MD5 in any security path.
- DNT and GPC respected on by default.
- Self-hosted by construction — your data never leaves your box.