Can I Code This?

STANDARD PROCEDURE · SP-002

Privacy

Short version: almost nothing is collected. The five exceptions, and everything else, are below.

What we store

  • Almost nothing, server-side. This is a static site — no accounts, no cookies, no localStorage. The one exception to "no tracking of who visits" is basic aggregate analytics, covered below as exception four
  • Exception one — unmatched ideas: if you type an idea into the "Got your own idea?" box and it doesn't match anything in the library, that text is logged — nothing else about you, no IP, no account, no way to tie it back to a person. It exists to show which kinds of ideas are missing from the library, so new ones get added from real gaps instead of guesses. It auto-deletes after 180 days
  • Exception two — the email list: if you deliberately type an email address into a subscribe box, that address is stored, along with the date and a short note of which page you signed up from (e.g. "Calendly" or "the homepage"). That note is there so the first email can say why you're getting it — it isn't an identifier and isn't used to track you around the site. Nothing else is recorded: no name, no IP, no open or click tracking, no pixel in the emails. Reply to any email, or write to the address on the contact page, and it's deleted
  • Exception three — live-generated idea answers: if the idea box can't find a strong match and you choose to request a live-generated one, the text you typed is sent to a third-party AI provider (Anthropic) to produce a response, and both the question and the result are logged for review, auto-deleting after 180 days — the same retention as exception one. This is disclosed separately from exception four below because it's a different kind of leaving Cloudflare's infrastructure — it's the text you chose to type, not just aggregate traffic. It's rate-limited and requires passing a bot check first
  • Exception four — basic traffic analytics: this site uses Umami Cloud, a privacy-focused analytics tool, to see aggregate traffic — which pages get visited, roughly how many visits, which country, which browser or device. It's cookieless by design: no persistent identifier is stored on your device, nothing here is tied to an individual, and it doesn't track you across other sites. If you run an ad blocker or privacy extension that blocks Umami's script domain (cloud.umami.is), that's a fine way to opt out — nothing else on the site depends on it
  • Exception five — submitted builds: this one is different from the rest of this list on purpose. If you submit something you built via the "submit a build" form, what you type — a title, description, a screenshot link, which app or idea it's based on, and an optional name or handle — is stored pending review. Unlike every other exception here, the whole point is for an approved submission to become public: shown on this site with whatever name you gave (leave it blank to stay anonymous). Nothing is published automatically — everything is reviewed by hand first, and rejected or never-reviewed submissions are simply deleted, not published
  • Hosting logs. The site is served by Cloudflare, which keeps standard, short-lived request logs (IP, URL, user agent) to run the network. That's Cloudflare's infrastructure, governed by its own privacy policy, not something this site adds to or accesses

What we don't do

  • No cookie-based tracking, and no cross-site tracking of any kind — the one analytics tool here (Umami) is cookieless by design and doesn't identify individual visitors, chosen specifically because of that
  • No selling or renting data — there's essentially nothing to sell
  • No accounts, so nothing tied to you personally, ever
  • No dark patterns, no pre-checked anything, no newsletter you didn't ask for — the subscribe box is opt-in and does nothing until you type an address and press the button
  • No third-party email service embedded in the page. The subscribe form posts to this site's own endpoint, so no script from Mailchimp, ConvertKit or anyone else loads on any page here
  • No selling, sharing or renting the email list — to anyone, for any reason
  • The AI-generation feature never runs automatically or silently — it only sends anything anywhere when you explicitly ask for it, after the static match has already come back empty
  • Analytics never does more than aggregate counting — no session replay, no heatmaps, no individual visitor profiles
  • No submitted build goes public without a human actually reviewing it first — never automatic, never instant

If that changes again

If this site ever adds something else that stores data — accounts, saved verdicts, anything more than what's listed here — this page changes first, and says exactly what's stored and why, before that feature goes live. That's what happened with the idea-matching log, the email list, the AI-generation feature, basic analytics, and now submitted builds: all five were written down here in the same change that shipped them.

last updated 2026-08-26