Privacy policy
This policy covers gearscript.org, the official GearScript website: the home page, the studio, the documentation and these pages. It explains what is collected when you use the site, why, for how long, and the choices you have. The site is run by (“we”). Questions or requests: .
The short version
- There are no accounts. You never sign in, and we never ask for your name or email.
- The studio runs on your device. The code you write and the files you open are not uploaded anywhere.
- We count visits with GoatCounter, a privacy-friendly analytics service. It sets no cookies, does not store your IP address, and shows us totals, not people.
- We set no cookies, show no ads and sell nothing. That is why there is no cookie banner.
- GearScript is open source, so you can check all of this in the code.
What is collected
Visit counts (GoatCounter)
When you open the home page or the studio, your browser sends a small request to GoatCounter. From it, GoatCounter records:
- the page's address and title, and the page that linked to it (the referrer);
- your browser and operating system, worked out from the browser's User-Agent header;
- your screen width and browser language;
- your country or region, worked out from your IP address.
To tell one visitor from many visits, GoatCounter matches your IP address and browser to a random id that is kept only in memory, for at most 8 hours. It does not store your IP address, your full User-Agent or any id, and it puts nothing in your browser: no cookies and no local storage. What we see is totals, such as how many visits came from a country or used a browser. We do not use this to identify anyone, and we do not combine it with other data.
The documentation and these legal pages are not counted. The counter runs only on gearscript.org: the offline copy of the studio, 3D players you export and copies of GearScript on other sites send nothing to GoatCounter.
Hosting
The site is static files served by GitHub Pages, a service of GitHub, Inc. As with any website, GitHub's servers receive your IP address and the details of each request (browser, page, time) and may log them to run and protect the service. We have no access to those logs. See the GitHub General Privacy Statement.
Files loaded from other services
The pages load their fonts from Google Fonts. The studio's 3D and video libraries come from this site. If they cannot be loaded (for example, a copy opened without its vendor folder), it fetches them from cdnjs (Cloudflare) or jsDelivr instead. If you tick Speak the lines into the video with a neural voice when exporting, the speech engine loads from jsDelivr and the voice files from Hugging Face. These services receive your IP address and browser details when they send the files, under their own privacy policies.
Kept only in your browser
Your projects, the 3D models you add, your editor settings and your tour progress are kept in your browser's storage. The site's own files are also cached so that the studio works offline. None of this leaves your device unless you save or export a file yourself. A project you share as a link is packed into the part of the address after #, which browsers do not send to any server, but anyone you give the link to can open it.
AI
gearscript.org does not offer the Generate and Fix with AI buttons, so nothing you write is sent to an AI service from this site. Prompt AI and Copy only copy text to your clipboard. When you paste that text into an AI service, that service's own terms and privacy policy apply.
Why we use it
| Purpose | Data | Basis |
|---|---|---|
| See how many people visit and which browsers and screen sizes to support | GoatCounter totals | Our legitimate interest in improving the site. The counts do not identify you. |
| Deliver the site and keep it secure | Request details handled by GitHub Pages | Our legitimate interest in running a working, secure website |
| Answer you | Whatever you write to us | Our legitimate interest in replying |
Cookies and local storage
gearscript.org sets no cookies, and GoatCounter sets none either. The site uses your browser's local storage and cache only to do what you ask: keep your projects and settings, and make the studio work offline. You can clear them at any time in your browser's settings, which also deletes any projects you have not saved as files.
If you would rather not be counted at all, block gc.zgo.at with any content blocker. The site works the same without it.
How long it is kept
- GoatCounter: the random id is kept in memory for up to 8 hours and is never stored. Totals, which identify no one, are kept while we use the service.
- GitHub Pages request logs: as set out in GitHub's privacy statement.
- Emails you send us: as long as needed to deal with your request.
Who receives data
We do not sell or rent personal data, and we do not use advertising. These services handle data to run the site: GitHub (hosting, in the United States) and GoatCounter (visit counts, stored on servers in Finland and Germany). The font and library services named above receive requests from your browser directly. Buy Me a Coffee is a separate service with its own privacy policy, and we share nothing from the site with it. We may disclose data if the law requires it.
International transfers
The site is run from India, hosted by GitHub in the United States, and counted by GoatCounter in the European Union. Where data crosses borders, we rely on these providers' safeguards and on the law that applies to you.
Your rights
Depending on where you live (for example under India's Digital Personal Data Protection Act 2023, the EU and UK GDPR, or Californian law), you can ask to see the data we hold about you, have it corrected or deleted, object to some uses, and complain to a regulator. Because the visit counts identify no one, we usually hold nothing we can link to you, but write to and we will check and reply within the time the law requires. You can also complain to your data protection authority (in India, the Data Protection Board of India).
Children
The site needs no account and asks for no personal details, from anyone. If you believe a child's personal data has reached us, contact us and we will delete it.
Security
There are no accounts or passwords to steal. The site is served over HTTPS. No system is perfectly secure; if we learn of a breach that affects you, we will tell you and the authorities as the law requires.
Changes
If we change this policy, we will update it here and change the date above.