Clear boundaries.
No tracking theatre.

What infrastructure may process

The site is delivered through Cloudflare Pages. Like ordinary web hosting, the provider receives request metadata such as IP address, user agent, requested URL, timestamps, and security signals needed to deliver and protect the service. Cloudflare may apply strictly necessary security mechanisms under its own terms. Cortxt does not use that data for advertising or visitor profiling.

External destinations

Links to GitHub, Cloudflare-hosted previews, and other external services leave the Cortxt site. Those services operate under their own privacy and cookie policies. Do not include private or customer data in a public GitHub issue.

The software and your data

The open-source Cortxt software is separate from this public website. Local or self-hosted deployments process the repositories, providers, credentials, workspaces, and evidence that their operator configures. Operators are responsible for the privacy, retention, access, and lawful-processing rules of those deployments.

If this changes

Before Cortxt adds hosted accounts, analytics, contact forms, or non-essential cookies, this statement must be updated with the controller identity, purposes, legal bases, recipients, retention periods, rights-request route, and any consent controls required for that processing.

Questions

For project-level questions, use the Cortxt repository. Do not post personal data in public issues. A private privacy-rights contact will be published before Cortxt operates a hosted account or customer-data service.

Reference principles

This statement follows the EU transparency principle that people should receive concise, intelligible information about what data is processed and why. See the European Commission’s guidance on transparency obligations and data protection by design and by default.