What this website, the setup mirror and the LocalGhost software do with information about you. The website and the mirror keep no record of your visit. The software keeps your data on your own box and asks the internet only for public things, and every lookup the phone makes of its own is listed below.
LocalGhost.ai Ltd (company number 17213100, registered in England and Wales) runs this website and the mirror and is responsible for them under UK data protection law. The software runs on your hardware, so for what it holds you're the one in charge, and the company never receives it.
> 1. THIS WEBSITE
- The site is served by nginx from a server I run, with access logging switched off for every page and every file, the mirror included. Nothing records your IP address, the pages you read or when you read them. The error log is kept at the critical level only, for faults in the server itself.
- There are no cookies, no analytics, no tracking pixels and no third-party scripts or fonts on the site. The one exception is a small dice game under
/random, which loads its fonts from Google Fonts, so Google sees that one request if you open it. - Two games keep a high score and a player name in your browser's local storage, and the playlist can keep tracks in your browser's cache so they play offline. All of it stays in your browser, and clearing the site's data there removes it.
- If you email info@localghost.ai, I read it and keep it in my mailbox to reply, and it isn't used for anything else or shared with anyone.
- The links to GitHub, X and LinkedIn are ordinary links. Once you follow one, that service's own policy applies.
> 2. THE SETUP MIRROR
The setup mirror runs on the same server with the same logging switched off, so a box that downloads its maps, models or a release leaves no record here. Every file on it is a public copy of something published elsewhere, and a box sends nothing but the request for the file.
> 3. THE SOFTWARE
Nothing of yours leaves the box. Your photos, videos, location trail, notes, voice notes, health data, chats and memories live on the box's encrypted volume and nowhere else, and I never receive any of it, since there's no server of mine for it to go to. There's no account, no telemetry, and no analytics or crash-reporting library in the server or the app. When the app records a crash, it writes it to the phone's own log, and it goes nowhere from there.
The box asks the internet for public things only, and nothing of yours is in the request.
- Prices from the exchanges and the ECB's exchange rates, fetched by the box.
- News feeds and the exchanges' tickers, fetched by the phone on Wi-Fi with no cookies, so their publishers see the phone's address, and by the box itself when the phone is away.
- Maps, models and releases from the setup mirror, checked against its signed manifest.
- A coin's own website for its page, and Wikipedia's API only on a box without its own copy of Wikipedia.
- The forecast for the world's three thousand larger places from Open-Meteo, once a day. The list is the same for every box, so the request says nothing about where you are, and the weather where you are is looked up on the box.
The box never asks for a map tile, and it never sends a location, a photo or a note. The phone talks to your box, and apart from the fetches above, only to these.
- When you ask the chat something the box can't answer from what it holds, the phone runs the search itself (DuckDuckGo, or Brave with your own key) and reads the pages, so the search engine sees the question's words and never your archive. In the same round, a "who is" question goes to Wikipedia's summary API with the name it asks about, unless the box has its own copy of Wikipedia, which then answers and nothing is asked.
- Once a day on Wi-Fi it reads the mirror's manifest to see whether there's a new release.
Up to wisp 0.0.2, a weather question that named no place also sent the phone's position, rounded to two decimal places (about a kilometre), to Open-Meteo, which needs no account and no key. Since wisp 0.0.3 the box answers it from its own daily pull and the phone sends no position for it. Up to wisp 0.0.3, to know which country it was in for the phrase packs, the phone also handed its newest position to Android's geocoder, which on phones with Google's services usually sent it to Google. Since 0.0.4 the box reads the country from its own map data. Up to wisp 0.0.4 a currency question the box didn't answer also went from the phone to Frankfurter, and since 0.0.5 the box answers it from the ECB table it keeps. An app older than these releases keeps doing the old lookups until it's updated.
The box keeps what you keep. Every memory can be edited or deleted from the phone, and the box never writes over your version. A wipe PIN destroys the volume's key, after which nothing on the disk can be read. The full list is in the repository's README under "What leaves the box", and Set Up a Box says the same from the operator's side.
> 4. CHANGES
When any of this changes, this page changes with a new date at the top, and the change goes in the changelog. Questions go to info@localghost.ai.