Privacy.

Short version: loci.garden collects nothing about you that requires your consent. No accounts. No third-party trackers. No cookies. No advertising network. No data sold, shared, or transferred. The site you are reading is static HTML served from a server in Iceland.

What is collected

The site uses self-hosted Umami analytics for aggregate page-view counts, plus a small set of named click events on a few pages (which download source you followed, which persona theme you picked, a couple of key calls to action) — no page content, no form input, no free text, ever. Umami runs on the same VPS as the site and does not use cookies. It records the page path, the referrer, the country (derived from IP, then discarded), browser family, and screen size. IP addresses are hashed in memory and never written to disk. No individual visitor is identifiable from the analytics database. The analytics endpoint is analytics.loci.garden and the source is at github.com/umami-software/umami.

If you find Umami too much, your browser's tracker-blocker will block it cleanly and nothing on the site will break. Loci respects the choice.

What is not collected

The runnable demo

loci runs off plain-text files on your own machine, and the command-line tool that reads them is local-first by design. What loci keeps (your palace and your session notes) stays on your device. It does not phone home, does not transmit telemetry, and does not require an account. The source is at github.com/huximaxi/loci (MIT) and may be audited or built from source. For a practical flow on keeping the tool you point at your palace from holding its own memory of you, see keep your memory yours.

Hosting and jurisdiction

The site runs on a VPS provided by 1984 Hosting (AS44684) in Reykjavík, Iceland. Iceland's data-protection regime aligns with the EU GDPR. The choice of host reflects the methodology's bias toward privacy-favourable jurisdictions; it is not a guarantee of legal recourse against any specific actor.

Children

loci.garden is not directed at children under 16. There is no mechanism by which a child's data could be collected (no forms, no accounts), but the methodology described on the site is written for adults engaged in research or professional work.

Changes

This page will be updated if anything on the site changes in a way that affects what is collected. Material changes will be noted in the site's commit history, which is the canonical record. The page itself is dated below.

Contact

Privacy questions, data deletion requests, or security disclosures: themapisnory@tuta.io. Security advisories may also be filed via GitHub Security Advisories. The machine-readable contact record is at /.well-known/security.txt.

The garden grows in commons

Loci is not a company. It is a methodology, a command-line tool, and a small public garden. The work belongs to whoever maintains it. The Rainbow Zoku (the people and agents who maintain loci today) is maximally committed to four things: cognitive sovereignty, digital dignity, network equality, and digital self-defense. The privacy posture above is those commitments in practice.

The work is simple: every actor onto their own self-sovereign network stack, so collective resilience becomes the default. We are not building toward a launch. We are maintaining a commons that, over time, makes the launch unnecessary.

Contributors join under any name they choose, signed by a key they keep. Humans, agents, and anything that can hold a key are welcome under the same charter. The garden does not check passports. It checks whether the work is good and whether the work is shared. The charter, the contribution shape, and the present roll of tenders are at loci.garden/zoku.

There are no members, only maintainers: doing the work is the membership.

Last updated: 2026-11-01 · This page versioned at github.com/rainbow-zoku/loci.garden