Privacy
This page describes pitot.dev. A self-hosted Pitot instance stores telemetry
on its own machine and sends no usage reports to LabStack. When you enable the
built-in agent, it sends conversation content and tool results to your configured
AI provider. External MCP clients receive the results of the tools they call.
Website analytics
Section titled “Website analytics”The site uses Google Analytics 4 to count visits and see which pages get read. It runs only when it is allowed to, and it is configured to learn as little as will still answer that question.
Checking whether analytics are running in this browser.
When it runs
Section titled “When it runs”- In the EEA, the UK, Guernsey, the Isle of Man and Jersey, the analytics tag is loaded and its identifier stored only after you allow analytics.
- Everywhere else, analytics run and the control above turns them off.
- If your browser sends Global Privacy Control, analytics do not run and you are not asked, because you have already answered. Choosing Allow above overrides that signal for this browser.
Do Not Track is not consulted.
Which of these applies is decided from the country Cloudflare reports for your connection. If that lookup fails, the site asks rather than assumes.
What is sent
Section titled “What is sent”When analytics are running, each page view sends the page path, the page title, the site you arrived from, and the coarse device, browser and country information any web request carries.
Two things are cut down before they leave the browser:
- Query strings are removed from the recorded address. Only the path is
sent, so anything a link put after the
?is not. - The referrer is reduced to its site. We record that you came from a search engine, not what you searched for.
Outbound clicks in the header, footer and landing page record the control, link text and destination URL. Copying the install command records the control used.
The site disables Google Signals and ad personalisation and enables ad data redaction.
What is never sent
Section titled “What is never sent”The site does not send search terms or collect form input. It has no accounts, session recording or heatmaps. Self-hosted telemetry does not pass through this website.
Storage
Section titled “Storage”Declining stores nothing that travels with a request. Your answer is kept in
your browser’s local storage under pitot.analytics-consent.v1, which is read
by this site and sent to nobody.
Allowing lets Google Analytics set its _ga cookies, which hold a random
identifier so repeat visits can be recognised as the same browser. Declining
afterwards deletes them.
Clearing your browser storage for this site clears the answer too, and the question comes back if your location requires it.
Hosting
Section titled “Hosting”The site is static files served by Cloudflare Pages. Like any web server, Cloudflare receives the IP address and request headers needed to deliver a page, and is the reason this site knows which country to apply the rules above to. That processing is Cloudflare’s, under their terms, and happens whether or not you allow analytics.
Contact
Section titled “Contact”Questions about this page belong in an issue. The site’s source, including the analytics code described here, is in the repository.