Privacy policy

What we do not collect

The text you search for, the pages you open and the bookmarks you keep never leave your device. Searches are computed locally by the site's code; there is no search server, so we could not read your searches even if we wanted to. Bookmarks are stored in your browser's local storage and can be deleted by you at any time by removing them on the bookmarks page or clearing site data.

One thing to know about sharing: when you copy a link to a page a find built for you, the link itself contains the text you searched for, folded into the address, because the page is recomputed from that text when the link is opened. Share those links as you would share the text.

Analytics

We use Plausible Analytics and Google Analytics 4 to understand how the site is used: pages visited, the referring site, country, device and browser type, and a few coarse events (such as a click on the support link). Plausible is cookieless and keeps no personal data. Google Analytics is provided by Google, which processes this data on our behalf under its data processing terms; it sets the cookies listed in our cookie policy and does not store IP addresses. We keep Google Analytics data for 14 months. See Google's Privacy Policy and how Google uses information from sites that use its services.

Neither tool ever receives an address: a page or a find is reported only as "a page" or "a find", without its address, its title or your search text, and query strings, which may contain your search text, are left out. Turn Analytics off in the cookie notice (or later through Your privacy choices in the footer of every page) and neither tool counts your visits: the analytics scripts are not loaded.

Cookies

The site itself sets one first-party cookie, tl_consent, which records the choice you make in the cookie notice so we do not ask again; it lasts 180 days, is mirrored in your browser's local storage as tl-consent, and holds nothing about you beyond that choice. If you leave the notice unanswered it closes itself after about twenty seconds and records what is already running: Essential on, Analytics on, and nothing else. Nothing new starts at that moment, and Your privacy choices in the footer of every page reopens your preferences. In the EEA, the United Kingdom and Switzerland, Google Analytics stays cookieless until you accept Analytics. While Analytics is on, Google Analytics sets two analytics cookies. There are no advertising, marketing or cross-site tracking cookies. The site also registers a service worker so that the app can work offline; it caches the site's own files in your browser and stores nothing about you. Local storage otherwise holds your bookmarks only. The cookie policy lists everything the site keeps in your browser.

Support payments

Optional support payments are handled by Ko-fi and Stripe on their own websites. We do not see your card details. Ko-fi sends us your display name, email address, message and amount so we can thank you and keep accounting records. Nothing from Ko-fi loads on this site until you click the support link in the footer or the heart in the bottom-right corner.

Hosting

The site's static files are served by Cloudflare, which as any web host sees the technical details of a request (such as your IP address) for the purpose of delivering the page and protecting the service. We do not receive or keep server logs tied to individuals.

Children

The site does not collect personal information from anyone, including children under 13. Note that the library contains every possible string of letters, so it can produce text that is offensive or unsuitable; it is generated by arithmetic, not written or reviewed by us.

Changes

If this policy changes, the new version will be posted here with an updated date. Material changes will be noted at the top of the page.

Contact

Questions about privacy: hello@elowinlabs.com. See also the terms of use.