What we do, and don’t,
with your data.
Most of the “your privacy matters to us” pages on the internet are wallpaper. This one tries to be a useful read.
The 43 tools
Files, text, images, code — everything you drop into the toolbox is read, processed, and rendered by JavaScript running on this device. Nothing gets uploaded. The downloads come from your own browser.
Tools persist in-progress work to localStorage when it makes sense — a session in Sum, a tally count, your wind-down minutes in Sleep. Storage keys are namespaced hugoslekstuga:* and stay on this device. Clearing your site data wipes them.
Munch
Munch is the one tool that needs a server. It’s a real-time multiplayer game; for other players to see your blob, your name and your moves have to be sent somewhere. That somewhere is a small Node process intended for a Stockholm region.
The server keeps no logs, no database, no third-party connections. When the last player disconnects, it idles. We don’t track who plays. The room is shared globally; the only persistent state is what’s currently on screen.
Fonts and assets
Geist and Bricolage Grotesque are downloaded from Google Fonts at build time and bundled with the site. After your page loads, no requests go to Google. The pdf.js worker that powers the PDF tool is vendored at /vendor/pdf.worker.min.mjs for the same reason.
What we’d need to add to break this
Analytics. Ad networks. Live currency rates. A cloud sync. A login. None of those are here, and none of them are coming. If a feature can’t be built without one of them, we don’t ship the feature.