Privacy

Three surfaces, three boundaries.

This page covers the public website, the CloudFront delivery layer, and the website-build app telemetry policy so the site and the app describe the same behavior.

01

Website analytics

The site is currently shipped without client-side analytics enabled.
When website analytics is enabled, it will use a separate PostHog project from the app.
Autocapture, session replay, heatmaps, identify, alias, and group calls remain disabled.

02

CloudFront delivery logs

Static files and release artifacts are delivered through CloudFront backed by a private S3 bucket.
CloudFront and AWS may log standard delivery metadata needed for security, performance, and abuse prevention.

03

Website-build app telemetry

Fresh installs downloaded from this website default to anonymous app telemetry for the website release track.
Telemetry can be turned off at any time from the in-app settings screen.
Existing installs keep their prior choices and unresolved legacy installs must follow the migration rules defined in the app telemetry plan.