← Waymode

Privacy & security for the Waymode site

Updated September 20, 2026.

Using the site

The site uses a one-hour session cookie to keep your requests and interactive demo state separate from other visitors. Requests to Waymode send your submitted prompt and relevant demo or page state to our model service. Rate limits process your network address at the edge to protect the site. The app stores a keyed network hash that rotates each UTC day, rather than your raw address. Server logs record request status, timing, usage, and request identifiers; they do not record prompt bodies, authentication cookies, or raw IP addresses.

Model requests use Vercel AI Gateway and Jev. This site does not require zero data retention from those services. They may retain submitted prompts and relevant page or demo state under their applicable policies. Do not submit confidential information.

The page loads its Onest font from Google Fonts. That request sends your IP address and browser request metadata to Google before any analytics choice. See Google Fonts privacy information.

Cloudflare Turnstile checks visitors before model requests. It processes browser signals and your network address to limit bots and abuse. This security check is separate from optional analytics.

Optional analytics and replay

If analytics is configured, we ask before loading PostHog. Choosing “Allow analytics” lets PostHog collect clicks, navigation, timing, heatmaps, and session replay, including what you type into the site’s fields—even drafts you do not submit. We also record submitted and suggested prompts, runtime actions and outcomes, stop requests, and browser console messages during replay.

Ordinary site content, form inputs, and visible runtime traces are recorded without masking. Password fields, hidden credentials, and security checks remain excluded. We exclude network request bodies, authentication headers, and cookies from replay. Runtime records redact credential fields and common secret formats, but automated redaction cannot identify every confidential value. Please do not enter passwords, API keys, or confidential personal or business information into this site.

Your choice

“No thanks” keeps PostHog off. You can change your choice through “Analytics preferences” in the homepage footer when analytics is available, or ask Waymode to change your preferences or show you how. Withdrawing consent stops future collection; it does not erase records already collected. We also honor Global Privacy Control and Do Not Track. The site and its interactive demo work without optional analytics.

PostHog uses browser storage and cookies after opt-in to connect activity across visits on this site. Analytics cookies expire after 30 days; local browser storage remains until you clear it or opt out. Our analytics settings control record retention and team access. See PostHog’s privacy policy for information about its service.

Questions or data requests

Contact the Waymode maintainer through the contact details on our GitHub profile. Do not post personal information in a public issue.