Privacy Policy

Last updated 2026-08-23

The AI Commit (theaicommit.com) is a solo, personal project. This page explains plainly what data the site touches and what it doesn't. You can read and run everything here without an account. The two optional exceptions are GitHub sign-in (to publish a gist from the Code tab) and the newsletter (if you type in an email).

What we collect

Most of what the site stores never leaves your browser. It's kept in localStorage:

• Reading progress — which sessions you've marked as read, so the grid can show you what's new. Per-browser, never leaves your device.
• Code editor edits — if you modify a code_example.py in the interactive Run panel, your edit is cached locally for 24 hours so a refresh doesn't lose it. Same as above: local only, expires automatically.
• GitHub sign-in — the Code tab has an optional "Publish to GitHub" button that creates a private Gist of your (possibly edited) copy of a code example in your own GitHub account. Signing in uses GitHub's standard OAuth flow: after you authorize, GitHub sends a one-time code that a small serverless function (Cloudflare Pages Function) exchanges for an access token — that exchange does not log, store, or retain anything; it forwards the code and returns the token. The resulting token and your GitHub username are then kept in your browser's localStorage — not in a cookie, not in our database. Publishing a gist calls GitHub's API directly from your browser using that token; we never see the gist's content. Sign out anytime from the Code tab to remove the token from your browser (this doesn't revoke it on GitHub's side — do that from github.com/settings/applications if you want to fully revoke access).

Newsletter

If you subscribe, we store the email address you typed so we can send you one email when a new daily session ships. That's the only reason we keep it.

• What we store — your email, whether the subscription is active or unsubscribed, an unsubscribe token, and timestamps for those events. Nothing else: no name, no job title, no tracking pixel, no open or click analytics.
• Where it lives — a Cloudflare D1 database in our Cloudflare account, reached only by the signup / confirm / unsubscribe / send Functions on theaicommit.com. The GitHub Pages mirror has no server of its own; a signup from that mirror is posted to theaicommit.com.
• Who else sees it — if mail is configured, the welcome and session emails are sent through Resend, who process the address solely to deliver those messages. We don't sell, rent, or share the list.
• How to leave — every newsletter includes an unsubscribe link that marks the address unsubscribed immediately. You can also email theaicommit@gmail.com and we'll do it.

What our host sees

The site is served by Cloudflare Pages. Like essentially any web host, Cloudflare's edge servers process standard connection metadata to serve requests and defend against abuse — things like your IP address and request timing, in server logs we don't separately collect or analyze ourselves. See Cloudflare's privacy policy for what they do with that.

No cookies, no tracking, no ads

We don't set cookies, run analytics scripts, embed third-party trackers, or serve ads. The only client-side storage is the localStorage described above — including the GitHub sign-in state, which is a token in localStorage, not a cookie or a session we track.

Running code in your browser

The Code tab lets you execute code_example.py directly in your browser via Pyodide (Python compiled to WebAssembly), loaded from a CDN (jsdelivr). That execution happens entirely on your device — nothing you run is sent to us. jsdelivr's own handling of that request is governed by their policies, not ours.

Children's privacy

This site is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child subscribed, email theaicommit@gmail.com and we'll delete the address.

If this changes

Contact

Questions about this policy: theaicommit@gmail.com