Privacy policy

The data controller is Alex Wakeman, a sole trader based in the United Kingdom, contactable at wakemana@gmail.com. The same person who wrote the code answers the email.

The UK GDPR and the Data Protection Act 2018 apply, and the EU GDPR applies to visitors in the EEA. If you are in California, see §8.

The pages are static. They set no cookies and run no third-party scripts until you agree to them. What the site does collect:

• The contact form — the name, email address, subject and message you type. They are delivered to a private Slack channel that one person reads. Nothing else is collected with them: no fingerprint, no tracking identifier, and no third-party anti-spam service (the form is protected by a hidden field, a signed minimum fill time and a rate limit, all on our own server). Your email address is used to reply to you and for nothing else.
• Google Analytics 4, only if you press Accept on the cookie banner. It counts page views and sends your IP address, approximate location, device and browser details and the pages you view to Google. Decline and the script is never downloaded. Google Signals and ad personalisation are off. Details, and how to change your mind, are in the cookie policy.
• Server logs — the hosting provider records request details, including your IP address, for security and debugging.

Fonts and images are served from this domain: no Google Fonts, no CDN, no tracking pixel.

The demo runs in your browser on invented sample data. Nothing you type or click in it is sent to us, beyond the consented analytics above.

Legal basis: consent (UK/EU GDPR Art. 6(1)(a)) for analytics; legitimate interests (Art. 6(1)(f)) for keeping the site secure and for answering a message you chose to send.

Limn runs on your computer and keeps everything in a file under your home directory. We have no server in that path and receive none of it. What the app does, so you can decide where to run it:

• It copies GitHub activity into that file — pull requests, review comments, commits, and the usernames and avatars of everyone involved. That includes people who never chose to use Limn: your colleagues and any outside contributor. It only reads what your own GitHub login can already read.
• AI features send content to your AI provider — diffs, comments and ticket text for the pull request being reviewed or fixed. They use your own AI agent: a Claude Code login or Anthropic API key (Anthropic), or Codex on a ChatGPT plan (OpenAI). The content goes from your machine to that provider under your agreement with them. We never see it.
• Optional integrations you set up yourself — a Slack webhook, an issue tracker, SonarCloud — receive or send only what those features need, directly from your machine.
• First-use downloads — the AI runtime and the comment-grading model are downloaded the first time you ask for them, from npm and the model host. Those services see the request, as with any download.

If you run Limn for a team, you are the controller for the data it holds, under your own privacy notice.

No data is sold, and there are no advertising or data-broker relationships.

Transfers outside the UK/EEA rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, as incorporated in each provider's data processing terms. We may also disclose data where the law requires it.

• Contact-form messages — kept in the Slack channel for as long as the conversation is useful, and deleted on request. The site keeps no copy of its own. The one exception is a failed delivery, which is written to the server log so the message is not lost.
• Server logs — kept by the hosting provider for a short window (days, not months).
• Analytics — kept by Google under the property's data-retention setting.

Under UK/EU GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, and withdraw any consent you have given. Email wakemana@gmail.com and we will respond within one month. It never costs anything.

If your GitHub activity appears in someone else's Limn, that copy is on their machine, not ours — ask them.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office, or to your own EU supervisory authority.

The site is served over HTTPS with HSTS and a strict content security policy. If you find a vulnerability, report it privately to wakemana@gmail.com rather than opening a public issue.

We do not sell personal information and do not share it for cross-context behavioural advertising, as the CCPA/CPRA define those terms. You have the right to know what we collect (§2), to delete it, to correct it, and not to be discriminated against for asking. Email wakemana@gmail.com. We do not knowingly collect data from anyone under 16.

If this notice changes materially we will update the date at the top and, where the change affects consent, ask again. The full history is in the public git repository.