What this site measures, and what it cannot see.

The plugin sends nothing, ever

This is the part worth stating first, because it is the part people ask about. The plugin has no telemetry. It opens no network connection to us, has no account, no API key for its core, and no way to report what it saw. Your source code, your diffs, your commit messages, your file paths and your violations stay on the machine that produced them, in a local SQLite database you own and can delete.

This website cannot read any of it, and could not if it wanted to: there is no channel between the two. Nothing you do in your editor appears here, and nothing you do here reaches your editor.

You do not have to take our word for it. The plugin is Apache 2.0 and its entire source is at github.com/BULDEE/ai-craftsman-superpowers. Grep it.

What this website measures

We count visits with Google Analytics 4 (property G-V25NSL2W5E), for one purpose: knowing which pages are read, so we know which ones are worth writing. Pages viewed, approximate country, browser and device type, and where a visit came from.

Traffic measurement and nothing else. We run no advertising and build no audiences. Google's advertising permissions, ad_storage,ad_user_data and ad_personalization, are set to denied when the page loads and no code in this site can raise them, including the consent banner. The tag itself is configured with allow_google_signals: false andallow_ad_personalization_signals: false, so the property cannot start building advertising audiences even through Google's own interface. Your IP address is anonymised before storage.

Google Signals, the feature that links measurement to signed-in Google accounts and their advertising profile, is off on this property. Advertising consent signals are reported as inactive in the property itself, which is the same statement made from Google's side rather than ours.

This is verifiable from your browser: open the page source and read the first script in the head, before anything from Google is loaded.

Nothing is measured until you agree

The consent defaults are set before the analytics tag is loaded, not after. Until you press Accept, no analytics cookie exists and no measurement is sent. If you decline, or if your browser sends a Global Privacy Control or Do Not Track signal, we never ask again and never measure.

Your answer is stored in your browser's local storage undercraftsman.consent.v1, not in a cookie and not on our servers. You can change it at any time with the Cookie choice button in the footer of any page, or by clearing your browser storage for this site.

Cookies

• Strictly necessary: none. This site sets no cookie of its own, has no accounts and no sessions.
• Analytics, optional: Google's _ga cookies, set only after you accept, to distinguish one visitor from another. Google's stated lifetime is two years; declining or withdrawing prevents them being set.

Who processes what

• Railway hosts the site and keeps standard server logs, which include IP addresses, for a short technical period.
• Sanity stores the articles and documentation. It holds our content, not your data.
• Google Analytics as described above, only with your consent.
• Search runs entirely in your browser. The index is a static file your browser downloads, so what you type in the search box is never sent anywhere.

BULDEE does not sell, rent or share personal data. Data is shared only with the technical subprocessors above, under contract, or where the law requires it.

How long

Measurement data is retained for 14 months, for both events and users. That is the number configured in the property, and it is stated here rather than rounded to the 13 months usually quoted: Google Analytics offers a choice between 2 and 14 months, and a policy that announces a duration the tool cannot apply is a policy nobody can verify.

Server logs are kept for a short technical period by our host. If you write to us, your message and contact details are kept for 3 years from our last exchange.

Your rights

Under the GDPR you may request access, rectification, erasure, portability, restriction, or object to processing. Write to dpo@buldee.com and we answer within 30 days.

If you believe your rights are not respected, you may lodge a complaint with the CNIL, the French supervisory authority, at cnil.fr.

Controller

BULDEE, represented by Alexandre Mallet, is the data controller.contact@buldee.com. This page covers this website; the company's full policy is atbuldee.com/politique-de-confidentialite and governs anything not stated here.

Last updated 11 August 2026. Changes are published on this page with a new date.