Privacy

OPPOSITE CITY is a set of static pages. It has no accounts of its own, no cookies, no analytics and no tracking scripts, and it keeps no server-side record of you. The site is hosted on GitHub Pages, which keeps ordinary web-server logs (such as your IP address) under GitHub's privacy statement. Fonts and scripts the site needs are served from opposite.city itself.

Things your browser may send elsewhere

Some surfaces talk to other services when you use them. Everything here happens in your browser, not through us:

• Bluesky / atproto (bsky.social, public.api.bsky.app, plc.directory, your own PDS, pds.delve.town): aureole, idiophone, poemstream, remix, slopflag, soundsky, ximeremix. Signing in or posting sends your handle and, where you choose to publish, your content to those services.
• Datamuse (api.datamuse.com): aureole, dof, room, for word lookups.
• Hugging Face, jsDelivr and esm.sh: apophasis, crypsis, pentimento, semantic-voyage, slopflag, soundsky and titivillus download in-browser model files or code libraries from these hosts. The models then run on your device.
• Internet Archive: clef and shellac may load audio or text from archive.org.
• YouTube: clipper loads the YouTube player API when you use it.
• Microcosm Constellation (constellation.microcosm.blue): backlink lookups in some atproto surfaces.
• GitHub (raw.githubusercontent.com): semantic-voyage loads data files.

Each of those services sees your IP address and what is requested, under its own policy. The page source of each surface is the authoritative list.

Sign-in and storage

• Surfaces that publish to Bluesky ask for an app password, never your main password. Create one at bsky.app/settings/app-passwords and revoke it when you are done. It is sent only to your Bluesky or PDS host.
• slopflag keeps its session in sessionStorage (gone when the tab closes). ximeremix and remix keep a refresh token in localStorage only if you tick "remember"; clear it by signing out or clearing site data.
• Other surfaces may keep drafts or settings in your browser's storage. That data never leaves your device.

Security reports

See security.txt.