Analytics preferences
Optional analytics are off. JavaScript enables the preference controls on openroot.dev.
Allow and decline are equally available. You can withdraw permission here at any time. A browser Do Not Track or Global Privacy Control signal keeps collection disabled.
What we collect, if you allow it
On reviewed public pages, OpenRoot sends pageviews and a small set of navigation clicks to our PostHog EU project. Events contain the public page path, referrer domain and random visitor/session identifiers, not your account identity. Query strings, fragments, referrer paths, form fields, emails and project proposals are not sent.
We do not load PostHog’s browser SDK, session recording, automatic DOM capture, heatmaps or advertising pixels. We do not identify visitors or link browsing to builder accounts. Like any network recipient, PostHog receives technical connection information including the source IP and may derive approximate location according to the project settings; this is not a claim that every vendor-side record is anonymous.
Excluded areas
The application form, submission receipt, builder portal, sign-in, application review and API routes do not load or send optional analytics, even if you previously opted in. Translated program guides are also outside the initial tracking scope.
Applications and portal accounts follow their separate published notices: application privacy notice and builder and portal guide. Signing in uses a necessary secure session cookie; declining analytics does not affect applying or signing in.
Browser storage and third parties
We remember your choice for up to 90 days in first-party browser storage. If allowed, a random visitor identifier lasts up to 90 days; a session identifier expires after 30 minutes of inactivity and is stored for the browser tab session. Withdrawal clears those analytics identifiers and stops future collection, but does not erase previously sent events automatically. PostHog event retention is controlled separately by the project settings.
Newsletter links take you to Beehiiv, and LinkedIn/GitHub links take you to those services. Their own privacy policies apply after you visit them. Optional analytics run only on openroot.dev, not local or hosting-preview addresses.
Community joining
OpenRoot, operated by Kristofer Jussmann, records your verified GitHub ID and username, optional interest, community-rules acceptance, joining request and invitation status to manage community membership. Records are private, stored in Finland and kept for up to 12 months. No portal account or newsletter subscription is created. Contact hello@openroot.dev for access, correction or deletion. Hosting services handle technical request logs.
A necessary secure cookie binds the ten-minute GitHub verification flow to your browser. Your browser tab also holds a temporary opaque joining reference so you can return to your request; it is not a portal login. No optional analytics run on /community or /github-callback. GitHub handles authorization and invitation acceptance under its own policies. Join the community or contact us for membership help.
Questions or deletion requests
Contact hello@openroot.dev about privacy or data deletion. Analytics identifiers are not connected to your email, so locating prior anonymous events may require additional information. Do not send passwords, API keys or sign-in codes.