Privacy Policy · Jacob Suchorabski

Summary

This site has no ads, no tracking cookies and no visitor accounts. It counts visits with Cloudflare Web Analytics, which uses no cookies. The tools send only what they need to work, and the API logs failures, not people. Mermaid stays in the browser. PlantUML source is forwarded to Kroki to draw the picture.

Hosting

suchorab.ski and its API at api.suchorab.ski are hosted by Cloudflare. To deliver and protect them, Cloudflare processes each request's IP address, browser details and the address requested, derives your country from the IP address, and keeps request logs under its own privacy policy. If Cloudflare's security checks show you a challenge, it sets a cf_clearance cookie so you are not asked again. Pages that show an email address load a small Cloudflare script that decodes it, which keeps it away from spam bots.

Analytics

Public pages use Cloudflare Web Analytics. It sets no cookies, uses no local storage and builds no profile of you. It records the page address, the referring page, browser and device type, country, and loading-performance timings, including which page element or image a timing refers to. It is not used on the Wishlist.

Images from other sites

The blog shows avatars and photos loaded from X's servers, and Wishlist items show images from the shops that sell them. Those sites receive your IP address and browser details when the images load.

Stored in your browser

Local storage: your theme choice (theme), the Lingo model (lingo:model), and the Diagrams draft (diagrams:draft).
Cookies: only when you use a feature. lingo_key after you save a key in Lingo, Cloudflare Access's sign-in cookies for the Wishlist, and cf_clearance after a security challenge. There are no analytics or advertising cookies.

Lingo

If you save an Ollama Cloud API key, it is kept for one year in an HttpOnly cookie on api.suchorab.ski that only the API can read. You can remove it in Lingo's settings. Text you send is passed to Ollama Cloud to generate the answer, under Ollama's privacy policy. The API neither stores nor logs it. To limit requests per minute, Cloudflare uses your IP address; the API does not write it to its logs or database.

Diagrams

Mermaid diagrams are drawn on this device. The text is not sent to the API. PlantUML source is sent to the API, which passes it to Kroki to draw an SVG and returns that image. The request to Kroki comes from the API, so Kroki does not receive your IP address. The API does not store the source and does not write it to its logs. A draft of both editors is saved in local storage on this device under diagrams:draft.

Wishlist

The Wishlist is invite only. Sign-in uses Cloudflare Access, which emails you a one-time PIN and sets sign-in cookies that last 24 hours. Cloudflare Access logs each sign-in, with your email address, IP address and the time, for 24 hours. Your email address and your reservations are stored in the Wishlist database until they are removed. Removed entries can still be restored from Cloudflare's database backups for up to 30 days.

Error logs

Successful requests to the API are not logged. When a request fails, the API records the address requested without its query string, the status, an error code, the timing and the code location involved. These records contain no IP address, email address, cookies or text you entered, and are deleted after 7 days.

Changes

If these practices change, this page and its updated date will change before the new behavior ships.

Contact

Questions? Email [email protected].