Privacy

In your browser

No site runs analytics or tracking scripts. The language switch saves your Traditional Chinese or English preference in a zyx_locale cookie for one year, shared across zyx.tw subdomains. 1909 also sets cookies that keep its members signed in.

If you switch the theme (the D key, or the toggle on ui.zyx.tw), your choice is saved in your browser's localStorage under the key “theme”. Plump keeps your current scene there too. None of it leaves your device. Scenes saved on the old 3d.zyx.tw address remain there; export a scene and open it in Plump to move it to plump.zyx.tw.

Each site serves its own fonts or uses fonts already on your device.

The 3D mark and interactive Made models on www.zyx.tw load their lighting from plump.zyx.tw, another of these sites.

On the servers

www, ui, plump, 3d, link, time, good and 1909 are hosted on Vercel, which handles every request and keeps its own logs under the Vercel privacy policy.

When www, link, time, good or 1909 renders a request on the server, it records the request with OpenTelemetry and sends the record to Loki's own monitoring service, sensorium.zyx.tw. A record can hold the method, the path and query string, the status and timing, your user agent and referrer, your IP address, and the city, region and country Vercel derives from it. Server errors are recorded with the same details. Records are deleted after 30 days.

The previews and the other hosts run on Loki's own server behind a gateway, which logs each request (your IP address, the request and its headers without credentials, and the response status) and keeps the log for up to 30 days. data.zyx.tw serves files from Cloudflare R2 under the Cloudflare privacy policy.

The GitHub activity on About is fetched by the server from the GitHub API. Your browser does not contact GitHub for it.

What the sites keep

link.zyx.tw keeps each URL you shorten, with its short code and the time it was made. It does not keep who made it, and anyone with a short link can open it.

1909 signs its members in with Google and asks only for their name, email address and profile picture. Only an email on its member list can make an account. It keeps that profile and the tokens Google returns. Each sign-in lasts 90 days and records the IP address and browser it came from. It also keeps the members' names, emails and shared expenses, which only signed-in members can see.

1909 uses Google data only to sign its members in and to know whose expenses are whose. It does not sell it, share it or use it for ads, and it follows the Google API Services User Data Policy.

Both sites keep their data in one database hosted by Neon, under the Neon privacy policy.

Apart from the logs above, no other site keeps anything about you. Hosts under kitbash.zyx.tw run Loki's own experiments and are not public services.

Leaving the sites

Links to sites outside zyx.tw open in a new tab and send them no referrer. A short link sends you to whatever address its maker gave.

On ui.zyx.tw, the Ask AI demo opens ChatGPT, Claude or Google with the page's address and a prompt, only when you click one of them.

Questions and removal

To ask what is kept about you, or to have a short link or your data removed, write to mail@zyx.tw. This page changes when the sites do; the date at the top is the last change.