Privacy policy

Last updated: to be set at launch.

What this page covers

This policy covers only this website (umbra-web) and the anonymous analytics it collects about visits to it. It does not cover the Umbra desktop application, which is a separate product with its own, much stricter privacy disclosure — see the FAQ and the app's own README for that claim. Nothing you do inside the Umbra app is described by this page.

Data collected

This site uses PostHog, hosted in the EU, for anonymous page-view and download-intent analytics, run in cookieless mode — no cookie or persistent identifier is ever stored in your browser. Session recording and autocapture are both turned off. With that configuration, visiting this site can generate the following data:

• The page path and URL you viewed, and the page you came from, if any
• Your browser, operating system, device type, and screen size, read from standard browser information — not from a fingerprinting script
• If you click "Download," which platform you selected (macOS, Windows, or Linux) — this tells us which platform to prioritize, not who you are
• If you click "Watch on GitHub" — again, only that the click happened
• Core Web Vitals performance metrics for the page you're on (load speed, responsiveness, layout stability) — not tied to who you are
• Aggregate click-position and scroll-depth data, used to generate an anonymous heatmap of page activity — not a recording or replay of your individual session
• Standard analytics metadata: a timestamp and an event name for each of the above

Confirmed: this site's PostHog project does not store the IP address your browser connects from. IP anonymization is enabled at the project level, and — because this site's analytics run in PostHog's cookieless mode — your IP is additionally hashed into an anonymous identifier and stripped before any further processing, rather than stored.

What's not collected

• No cookies
• No full-session recordings, no screen replays, no individual click-by-click replay
• No cross-site tracking, no advertising identifiers, nothing shared with ad networks
• No account, no email address, no name — this site has no sign-up, login, or newsletter
• No data leaves the EU for this site's own analytics — the PostHog project we use is EU-hosted

Legal basis & your rights

We process this data under "legitimate interest" (GDPR Article 6(1)(f)): it’s limited to anonymous, aggregate measurement of how this site is used, for our own use only, and isn’t combined with any other data source or used to track you elsewhere.

You have the right, under GDPR, to access, correct, or request deletion of data held about you, to object to this processing, and to lodge a complaint with the CNIL (cnil.fr), the French data protection authority. In practice, because this analytics has no account, email, or persistent identifier tied to it, there is usually nothing we can look up against your specific identity even on request — that’s a consequence of collecting less, not a way of avoiding these rights. If you believe we hold something identifiable about you, or have any other question, contact us below.

Data controller & contact

Contact details to be added.

Changes to this policy

This page is updated whenever what we collect changes — for example, when a new analytics event ships. Changes are dated at the top of this page.