Privacy & disclosures

What this site does with your data.

Almost nothing, which makes this short. There are no accounts, no analytics, no tracking pixels, and nothing you type into the generator ever leaves your browser.

Last updated: September 2026

What is collected

Nothing, by this site.

There is no server-side code here. These are static files on GitHub Pages. There is no database, no contact form, no account, no newsletter, no comment system, and no analytics of any kind — no Google Analytics, no Plausible, nothing.

Two things are worth being specific about, because they are the only exceptions.

The Compose generator

Everything you type stays in your browser.

The generator runs entirely as JavaScript on the page you are looking at. Your domain, storage paths, VPN credentials and generated secrets are held in memory while the page is open and are never transmitted anywhere. There is no server to send them to.

Secrets are produced by crypto.getRandomValues, your browser's own cryptographic random source. Closing or refreshing the tab discards everything. Nothing is saved between visits.

You can verify this rather than take my word for it: open your browser's developer tools, switch to the Network tab, and use the generator. You will see no outbound requests beyond the fonts.

What is stored in your browser

Two small preferences, using localStorage. Both stay on your device, are readable only by this site, and are never sent anywhere.

KeyWhat it holdsWhy
mms-themelight or darkRemembers your theme so the site does not flip back each visit
mms-amz-regionAn Amazon store, e.g. comRemembers which regional store you chose on the hardware page

Neither is a cookie, neither identifies you, and clearing your browser data removes both with no consequence beyond losing those two preferences.

Third parties

Three, and only one of them happens automatically.

WhoWhenWhat they can see
Google FontsEvery page loadYour IP address and browser, because the fonts are requested from their servers
GitHub PagesEvery page loadStandard web server logs, as the host of this site
AmazonOnly if you click an affiliate linkWhatever Amazon normally collects once you are on their site
On Google Fonts.

Fonts are loaded from Google's servers, which means Google receives your IP address on each page load. This is common but it is still a third-party request, and you should know it happens. Self-hosting the font files would remove it — that is a change worth making if it matters to you.

Affiliate disclosure

As an Amazon Associate I earn from qualifying purchases.

The hardware page contains Amazon affiliate links. If you buy something after clicking one, this project receives a small commission and you pay exactly the same price. Modular Media Server is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.

Two things follow from that, and both are commitments rather than legal boilerplate:

  • Commission never determines a recommendation. The hardware page's own cost comparison argues for a used office PC over anything new, and the affiliate section says plainly that a roughly $150 used mini PC runs everything in this project. Advice that talks you into overspending would be worth less than the commission.
  • Affiliate links are labelled. Each one is marked paid link and carries rel="nofollow sponsored". Only the US store is an affiliate link; other regions are plain links that earn nothing, and the page says so when you switch to them.

Some VPN and VPS providers named elsewhere on the site operate affiliate programmes. None of those links are affiliate links at present. If that changes, the link will say so where it appears.

Your choices

  • Block the fonts. The site remains fully functional with a fallback typeface.
  • Clear the two stored preferences at any time through your browser's site data settings.
  • Avoid the affiliate links by searching Amazon yourself. The hardware page tells you exactly what specifications to look for, so the links are a convenience rather than a requirement.
  • Read the source. Every page is static HTML in a public repository. Nothing here is hidden from you.

Since no personal data is collected, there is nothing to request access to, correct or delete — but if you have a question, open an issue on the repository.

Changes

If this policy changes, the date at the top changes with it, and the edit will be visible in the repository's commit history.

Not legal advice.

This page describes plainly what the site does. It is written to be accurate rather than to be a legal document, and it is not a substitute for advice from someone qualified to give it.