Privacy

Privacy, the way the whole project is built.

CrumbVMS exists because footage should stay on hardware you own. This page is the same idea applied to the website: collect as little as possible, be plain about it, and never sell or share it. The code and the conversation live on GitHub; the only personal data I ever hold is an email you choose to send me.

Effective 6 July 2026.

The short version

No analytics. No cookies. No accounts. No telemetry.

The CrumbVMS software phones home to no one, no telemetry, no usage stats, no licence check, no cloud. This website has no analytics, no advertising, no tracking pixels, and sets no cookies. Bug reports and discussion happen on GitHub, on GitHub's site under GitHub's privacy policy, not through anything here. The only personal information I ever hold is an email you choose to send me, and that goes straight to my inbox, used only to reply to you. Never sold, never shared.

The longer version below just spells that out honestly, including the outside services involved (a web font, email forwarding, and GitHub itself) so there are no surprises. Your footage, and your data, are yours.

The CrumbVMS software collects nothing

CrumbVMS is a Docker stack you run on your own Linux box. It has no account system, makes no outbound connection to me or anyone else, and sends no telemetry, analytics, crash reports, or "anonymous usage" data. Your video, thumbnails, configuration, and database stay entirely on your hardware and your LAN.

Nothing about the software's "privacy policy" is a promise you have to trust, it's open source (AGPL-3.0-or-later), so the absence of any phone-home is something anyone can verify in the code. If a future, clearly optional integration ever sends data anywhere, it will be opt-in, documented, and have a self-hosted path, the operator's hardware is always the whole world. The rest of this page is only about the website, crumbvms.com.

What this website does and doesn't do

No tracking, no cookies

crumbvms.com is a static site. It runs no analytics (no Google Analytics, no Plausible, no Fathom), embeds no advertising or social tracking pixels, and does no fingerprinting. It sets no cookies and stores nothing in your browser to identify or follow you. The site's small bit of JavaScript does exactly two things: a scroll-in animation, and enlarging screenshots when you click them. Neither stores anything.

A web font

The site loads two typefaces (Space Grotesk and JetBrains Mono) from Google Fonts. To serve them, Google receives the network request your browser makes for the font files, which necessarily includes your IP address, the same as loading any file from any host. It is used only to deliver the fonts, not to build a profile of you, and it sets no cookies. If you'd rather avoid it, a browser that blocks third-party requests will simply fall back to a system font. (Self-hosting the fonts to remove this hop is on the list.)

Hosting and server logs

Like any website, the services that serve these pages (the site is self-hosted on the maintainer's own server, with Cloudflare in front of it as the network edge) may keep standard, short-lived access logs, typically your IP address, the time, your browser's user-agent string, and the page requested, to keep the site up and defend it from abuse. These logs are operational, are not used to track you across sites or build an advertising profile, and are not combined with anything else about you.

Feedback goes through GitHub; email is optional

There's no signup form, no mailing list, and no application to send. The two ways to reach the project are GitHub and plain email, and here's what each means for your data.

Testing the software has its own terms, published openly in the repo (docs/ALPHA-TESTER-TERMS.md); this page is only about how your information is handled.

Links to other places

The site links out to a few third parties, for example a source-code host (GitHub) and, in the footer, a "Coffee" link to a donations service (Buy Me a Coffee). Those are engaged only if you click them, and once you're there you're on their site under their own privacy policy, not this one. I don't receive individual analytics about you from them.

Your choices, and how to reach me

Because the only information I hold is an email you chose to send, exercising your rights is simple: email [email protected] and I'll tell you what I have about you, correct it, or delete it. If you're in a place with formal data-protection rights (for example the EU/UK or California), consider these your standing options here regardless.

Children

This website isn't directed at children, and I don't knowingly collect information from anyone under 16. If you believe a child has sent me their information, email me and I'll delete it.

Changes to this policy

If this changes, I'll update this page and its effective date, and note anything material in the Updates feed. Because there's so little data here, changes should be rare.

Who's responsible, and the law

CrumbVMS is a one-maintainer project. Questions about this policy or your data go to [email protected]. This policy is governed by the laws of the State of California, USA, without regard to its conflict-of-laws rules.