Privacy Policy

This statement describes the information practices of the AltosUI website, operated by Iron Sheep Productions, LLC. We believe in building software without surveillance, so this site is designed around a short principle: collect as little as possible, keep it for as little time as possible, and share it with no one.

What we do not collect

  • We do not ask you to create an account. There is no login for visitors.
  • We do not run newsletter sign-ups, contact forms, or payment forms on this website.
  • We do not use any third-party analytics, advertising, social, or session-replay scripts.
  • We do not set any cookies for public visitors.
  • We do not store your IP address.

Aggregate analytics — what we do collect

To understand which pages are useful and which campaigns bring people to the site, we record one anonymous row per request on this server. The record contains:

  • The pathname you visited (the part after the domain, with any query string stripped).
  • The response status (200 OK, 404 not found, etc.).
  • The referrer host only (e.g. google.com) — not the full URL, no path, no query.
  • Any utm_source, utm_medium, or utm_campaign parameters that were attached to the link you clicked, so we can attribute traffic to campaigns.
  • Browser family, device type, and OS family, parsed from the User-Agent string at a coarse level (e.g. "Safari / macOS / desktop"). No version numbers are stored.

Your IP address is never written to disk. It is used, at the moment your request arrives, to compute a 16-character hash of the form SHA-256(daily_salt : your_ip : your_user_agent). That hash is what gets stored. The daily salt is a random value generated fresh each day and is deleted after 48 hours, at which point the hashes from that day are mathematically uninvertible — even we cannot recover the inputs from them.

A second hash, derived from the first plus the current 30-minute time slot, groups your requests into a rough "visit" so we can count page flows. Like the visitor hash, it carries no identity and cannot be tied across days.

Retention: individual analytics rows are deleted after 90 days. Daily salts are deleted after 48 hours.

Outbound-link clicks

Links from this site to the App Store, or to altusmetrum.org, route through a short internal redirect (/go/appstore, /go/altusmetrum) so we can count how many people follow them. The redirect adds no parameters to the destination URL and the link still opens in a new tab; the only thing recorded is one additional analytics row of the same shape described above.

Automated crawlers and bots

Requests from search-engine crawlers (Googlebot, Bingbot, etc.), SEO tools, AI scrapers, and other automated agents are identified by their User-Agent string and flagged so we can exclude them from visitor counts. For bot rows only — not for human visitors — the source IP is briefly passed to ip-api.com to resolve a country for crawl-health monitoring, with a 3-second timeout and no retry. The IP is discarded immediately after the lookup.

No cookies on the public site

We do not set any cookies on this marketing website. The site requires no consent banner because there is nothing to consent to. (The site maintainer's admin dashboard, at /admin, uses a session cookie for login. It is not reachable by, or relevant to, public visitors.)

Sharing information with third parties

Iron Sheep Productions, LLC does not sell, rent, lease, or otherwise share the analytics rows described above with any third party. The only external network call made during analytics collection is the bot-country lookup described above, which is sent only for requests already identified as automated crawlers.

We may disclose information, without notice, if required to do so by law or in the good-faith belief that such action is necessary to (a) conform to the edicts of the law or comply with legal process served on Iron Sheep Productions, LLC or the site; (b) protect and defend the rights or property of Iron Sheep Productions, LLC; or (c) act under exigent circumstances to protect the personal safety of users of the site or the public.

Links to other sites

This website contains links to other sites, including the App Store, altusmetrum.org, and various hardware and licensing references within our guides. We are not responsible for the content or privacy practices of those sites and encourage you to read their privacy statements.

Security

Traffic to this site is served exclusively over HTTPS. The analytics database is hosted on Replit's managed Postgres service; access is limited to the site maintainer.

No system is perfectly secure, and while we take reasonable measures to protect the limited data we hold, you acknowledge the inherent security and privacy limitations of the public internet.

Children under thirteen

Iron Sheep Productions, LLC does not knowingly collect personally identifiable information from children under the age of thirteen. If you are under the age of thirteen, you must ask your parent or guardian for permission to use this website.

Changes to this statement

Iron Sheep Productions, LLC reserves the right to change this Privacy Policy. We will reflect significant changes by updating this page and its effective date. Your continued use of the site after such modifications constitutes acknowledgement of, and agreement to, the revised Policy.

Contact information

Iron Sheep Productions, LLC welcomes your questions or comments regarding this statement. If you believe that Iron Sheep Productions, LLC has not adhered to this statement, please contact us at:

Iron Sheep Productions, LLC

310 Scrub Oak Way

Monument, Colorado 80132

Email: info@ironsheep.biz

Telephone: 719-930-3881

Effective as of April 20, 2026.