PrivacyDesign + current build
Privacy as architecture
Privacy promises are cheap; most browsers make them in a settings page while the architecture does something else. ITISYOU's approach is to make the architecture itself the privacy policy — and to state clearly what is verified today versus designed for tomorrow.
What the Phase 1 design does
History, sessions, workspace data, and permission decisions are separate local datasets with separate boundaries — not one profile blob. Nothing is synced, uploaded, or shared; there is no account system.
The codebase contains no telemetry or analytics endpoint and no crash-upload path. This is checked as part of milestone verification — a claim we re-earn at every phase, not a slogan.
Camera, microphone, location, notifications: every request routes through one PermissionService whose default answer is no, with a local structured log of decisions.
The AI runtime is disabled interfaces only — no provider, no keys, zero calls. See the AI philosophy for exactly what that means.
"In development" above means: this is how the Phase 1 build is being constructed, and it has not yet shipped or been independently audited. We will not switch these to present-tense "guarantees" until each has verification evidence behind it.
browse.itisyou.app practices what it preaches
- No analytics, no trackers, no cookies. The site sets no cookies and loads no third-party scripts.
- No external requests. Fonts are self-hosted; every script, stylesheet, and image is served from this domain. The Content-Security-Policy header enforces it.
- No forms, no accounts. Nothing here collects your data, so there is nothing to leak.
- Static by construction. Pages are pre-rendered files; the only dynamic route, /api/status, serves a static JSON document about the project — it reads nothing about you.
Standard web-server request handling (the hosting platform's operational logs) is the only data processing involved in serving this site.
content-security-policy: default-src 'self'; img-src 'self' data:;
style-src 'self'; script-src 'self'; font-src 'self';
connect-src 'self'; object-src 'none'; base-uri 'none';
frame-ancestors 'none'
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
permissions-policy: camera=(), microphone=(), geolocation=()
Not yet a legal document
This page describes real behavior, but it is not yet a formal legal privacy policy — there is no shipped product to attach one to. A reviewed policy will be published before the first release (Phase 4), and it will be held to the same standard as everything else here: it must describe what the software verifiably does.