Privacy

In your browser

No site runs analytics or tracking scripts. None sets cookies, except 1909, whose sign-in sets cookies that keep its members signed in.

If you switch the theme (the D key, or the toggle on ui.zyx.tw), your choice is saved in your browser's localStorage under the key “theme”. The 3d editor keeps your current scene and your last SVG there too. None of it leaves your device.

Each site serves its own fonts. The one exception is the 3d editor's Text mode: when you type there, your browser asks Google Fonts for the font you picked, and the request carries the characters you typed.

The 3D mark on www.zyx.tw loads its lighting from 3d.zyx.tw, another of these sites.

On the servers

www, ui, 3d, link, time, good and 1909 are hosted on Vercel, which handles every request and keeps its own logs under the Vercel privacy policy.

When www, link, time, good or 1909 renders a request on the server, it records the request with OpenTelemetry and sends the record to Loki's own monitoring service, sensorium.zyx.tw. A record can hold the method, the path and query string, the status and timing, your user agent and referrer, your IP address, and the city, region and country Vercel derives from it. Server errors are recorded with the same details. Records are deleted after 30 days.

The previews and the other hosts run on Loki's own server behind a gateway, which logs each request (your IP address, the request and its headers without credentials, and the response status) and keeps the log for up to 30 days. data.zyx.tw serves files from Cloudflare R2 under the Cloudflare privacy policy.

The GitHub activity on About is fetched by the server from the GitHub API. Your browser does not contact GitHub for it.

What the sites keep

link.zyx.tw keeps each URL you shorten, with its short code and the time it was made. It does not keep who made it, and anyone with a short link can open it.

1909 signs its members in with Google and asks only for their name, email address and profile picture. Only an email on its member list can make an account. It keeps that profile and the tokens Google returns. Each sign-in lasts 90 days and records the IP address and browser it came from. It also keeps the members' names, emails and shared expenses, which only signed-in members can see.

1909 uses Google data only to sign its members in and to know whose expenses are whose. It does not sell it, share it or use it for ads, and it follows the Google API Services User Data Policy.

Both sites keep their data in one database hosted by Neon, under the Neon privacy policy.

Apart from the logs above, no other site keeps anything about you. Hosts under kitbash.zyx.tw run Loki's own experiments and are not public services.

Leaving the sites

Links to sites outside zyx.tw open in a new tab and send them no referrer. A short link sends you to whatever address its maker gave.

On ui.zyx.tw, the Ask AI demo opens ChatGPT, Claude or Google with the page's address and a prompt, only when you click one of them.

Questions and removal

To ask what is kept about you, or to have a short link or your data removed, write to mail@zyx.tw. This page changes when the sites do; the date at the top is the last change.