[PRIVACY_POLICY]

Anonymous by default

Tracking is treated as a defect, not a feature.

What we do NOT do

  • No third-party analytics — no Google Analytics, Posthog, Mixpanel, Segment, Plausible, Fathom, Hotjar, Meta Pixel, or equivalent.
  • No fingerprinting — we do not hash your User-Agent, screen size, timezone, fonts, canvas, or any other signal to identify you.
  • No IP logging — server functions never read or persistx-forwarded-for orcf-connecting-ip.
  • No tracking cookies — only sidebar:state (UI open/closed, no identifier).
  • No error reporters that exfiltrate context (no Sentry, LogRocket, etc.).

What stays in your browser only

Selected role / sector / country filters, the "since last visit" marker, and (if you sign in) your Supabase auth session live inlocalStorage on your device. They are never sent to our server. Clearing browser storage removes them.

If you sign up

Sign-up is optional. If you create an account, we store the profile fields you provide (display name, role, industry, geography, plan tier). We derive nothing from your IP, device, or browsing pattern.

Codified guarantee

A build-time ESLint rule fails CI if any tracker identifier (gtag, posthog, mixpanel,segment, plausible, fathom,hotjar, fbq, sentry) ever appears in src/. Reintroducing tracking requires removing that rule — visible in code review.