Privacy

This website

The public sites — the portfolio, the app download pages and the sign-in page — use Google Analytics, loaded through Google Tag Manager, and only if you agree to it. Until you choose, and whenever you decline, it sets no cookies. If you accept, it sets its own cookies to recognise a returning browser and records the usual signals — page path, referrer, approximate location derived from IP, and browser and device type. It is not used for advertising, and it never runs on the admin dashboard.

Every site, including the sign-in page, also uses PostHog, a product analytics service, hosted in PostHog's US cloud and reached through i.delacour.co.nz. It stores nothing on your device and records nothing until you choose; if you decline, it stays off. If you accept, it keeps an anonymous identifier in your browser and records the pages you visit and the links and buttons you use. On the portfolio and the download pages it also records a replay of the visit, with everything you type masked; the sign-in page and the admin dashboard are never recorded. If you sign in, it is linked to your internal account id, never your name or email address.

The site also reports browser performance and errors to Dash0, an observability provider, so that a page that fails to load is something I find out about rather than something you have to report. Those records contain the page URL, timing measurements and error messages. They exist to keep the site working and are not linked to an identity.

Cookies

Your analytics choice is kept in a cookie named dlc_consent, shared across delacour.co.nz and its subdomains for 180 days so you are only asked once. It holds the word granted or denied and nothing else. You can change your mind at any time with the Cookie settings control at the foot of this page, which asks again.

A second cookie stores your light or dark theme preference so the correct one renders on your next visit. It carries no identifier and is not shared with anyone. Google Analytics' cookies and PostHog's browser storage exist only if you accepted them.

The desktop apps

Nimbus, Quarry and Folio run entirely on your own machine. They have no account system and no backend of their own. Storage credentials and database connection details are held locally, with passwords in your operating system keychain, and Folio never sends your files anywhere.

The apps send basic usage analytics to PostHog: which screens are opened and which features are used, with every identifier stripped from the screen's address, so no file name, bucket, database or email ever leaves your machine that way. There is no session replay in the apps. All of them check a Delacour-operated update server for a new version. That request tells the server which app, version and platform is asking, and nothing about you or your files. Installer downloads are counted against an anonymous hash, not a person.

Outpost is the exception, because it has to be: it is a Gmail and Google Calendar client, so it holds a Google authorization you grant explicitly and syncs your mail and calendar in order to display them. That access is used for nothing else, and it can be revoked at any time from your Google Account permissions page.

Data, rights and contact

Nothing on this site asks you for personal information — there is no form, no newsletter and no account. If you email me, I keep that correspondence for as long as it is useful and no longer.

Google Analytics data, when you allow it, is processed by Google, usage analytics by PostHog in the United States, and error data by Dash0, each under their own terms. Everything else stays with me.

If you want to know what is held about you, or want it deleted, email chris@delacour.co.nz and I will action it. If you would rather not be measured at all, decline the cookie prompt and use any browser-level tracking blocker — nothing on this site depends on analytics to work.