Privacy policy
Last updated: 17 October 2026
Who we are
MuxMage (muxmage.com) is run by Vitezslav Machacek, an individual based in the Czech Republic, who is the data controller for the personal data described here. For anything about privacy, write to privacy@muxmage.com.
The short version
- Your designs stay on your device. The solver runs in your browser and projects are saved in your browser, not on our servers.
- Product analytics with cookies (PostHog) run only if you accept them in the cookie banner.
- Without that, we count page views and app events anonymously: nothing is stored on your device, and no IP address, browser details or identifier that outlives the page is sent.
- Cloudflare counts page views for everyone, without cookies.
- There are no accounts, no advertising, and we don't sell data.
What we process and why
Delivering the website (Cloudflare)
The site is served by Cloudflare. Like any web server, it processes your IP address, browser user agent, the pages and files you request and the time of each request, to deliver the site and protect it from abuse. Legal basis: our legitimate interest in running a working, secure website (GDPR Art. 6(1)(f)).
Page-view statistics (Cloudflare Web Analytics)
On every visit, Cloudflare Web Analytics counts the page you view, the site you came from, your browser, operating system and device type, your country, and how fast the page loaded. It sets no cookies, stores nothing on your device and does not follow you across visits or sites. Legal basis: our legitimate interest in knowing which pages are used and whether they load well (Art. 6(1)(f)).
Anonymous statistics (PostHog), without cookies
If you haven't accepted analytics cookies, we still count page views and named app events, such as opening the app or a solve finishing, with its result and duration. Each event carries the page address without its query, and a random identifier that exists only in the page's memory: it is not stored on your device and is gone when you close or leave the page, so your visits can't be linked to each other.
Your browser, operating system, screen, language, time zone and the page you came from are removed before an event is sent. Events go to our own address, which forwards them to PostHog's EU cloud without your IP address or browser headers, and PostHog is told not to look up a location. Clicks, errors and recordings are not captured. Legal basis: our legitimate interest in understanding and improving the product (Art. 6(1)(f)). If your browser sends a Global Privacy Control signal, these statistics are off too.
Product analytics (PostHog), only with your consent
If you click Accept in the cookie banner, we use PostHog to learn how MuxMage is used and to find errors. Events are sent through our own address, e.muxmage.com, to PostHog's EU cloud. We collect:
- pages viewed and the page you came from
- clicks on buttons and links, including the visible text of what you clicked
- named product events, for example opening the app, a solve starting or finishing, the number of devices loaded and the number of pins assigned
- technical errors and diagnostic logs: error messages and stack traces from the app
- session recordings: a replay of what you see and do on the page, with typed input masked
- browser, operating system, screen size, and approximate location (country or city) derived from your IP address
- a random identifier, stored in a cookie and in your browser's storage, that links your visits to each other
We do not send your project files to PostHog. But text that is on the screen, such as a project or signal name you typed, can appear in recordings, in error messages and in the text of a clicked element. Your IP address is used to estimate your location and is not stored with the events.
Legal basis: your consent (Art. 6(1)(a)). You can withdraw it at any time under , at the bottom of every page or in the app's sidebar. Withdrawing stops these analytics at once, deletes PostHog's cookies and stored identifier from your browser, and switches to the anonymous statistics above. It does not affect what was collected before.
Storage on your own device
The app uses your browser's storage for features you ask for: IndexedDB holds your projects and their history so your work autosaves, localStorage remembers the auto-solve setting, and localStorage remembers your cookie choice so we don't ask on every page. This data never leaves your device unless you export a project yourself. You can delete it at any time by clearing this site's data in your browser. That also deletes your projects, so export anything you want to keep first.
Cookies and similar storage
| Name | Set by | Purpose | Kept for | Needs consent |
|---|---|---|---|---|
ph_…_posthog (cookie and localStorage) | PostHog | Analytics: a random identifier and the current session | 1 year | Yes |
ph_… (sessionStorage) | PostHog | Analytics: state of the current tab | Until you close the tab | Yes |
muxmage.analytics-consent (localStorage) | MuxMage | Remembers whether you accepted or rejected analytics | 1 year, then we ask again | No, strictly necessary |
| Projects (IndexedDB) and the auto-solve setting (localStorage) | MuxMage | Features you use | Until you delete them | No, strictly necessary |
Nothing in the first two rows is written unless you accept analytics; anonymous statistics store nothing. If your browser sends a Global Privacy Control signal, we treat it as a rejection, don't show the banner and send no PostHog statistics at all; you can still accept under Cookie settings.
Who receives the data
- Cloudflare, Inc.: hosting, content delivery and page-view statistics (privacy policy)
- PostHog Inc.: product analytics with your consent, and anonymous statistics without it; EU cloud, data stored in Frankfurt, Germany (privacy policy)
Both act as our processors for this data, under data processing agreements.
International transfers
Our PostHog data is stored in the EU. Cloudflare runs a global network, and both companies are based in the United States. Where data leaves the EU/EEA, it is protected by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.
How long we keep data
- Analytics events and recordings in PostHog: [TODO: retention period], then deleted.
- Cloudflare request logs and page-view statistics: [TODO: retention period], under Cloudflare's standard retention.
- Data on your device: until you delete it, or as listed in the table above.
Your rights
Under the GDPR you have the right to access, correct and erase your personal data, to restrict its processing, and to data portability. Where we rely on your consent, you can withdraw it at any time under Cookie settings. To use any of these rights, write to privacy@muxmage.com. We reply within one month.
Your right to object
You can object at any time to processing based on our legitimate interest, which includes the
page-view statistics and the anonymous statistics. Write to
privacy@muxmage.com, turn on Global Privacy Control in
your browser, or block static.cloudflareinsights.com and e.muxmage.com
with any common tracker blocker; the site works fully without them.
Page-view statistics, anonymous statistics, and PostHog data after you withdraw consent and the identifier is deleted, cannot usually be linked to you (GDPR Art. 11). If you give us details that let us find your data, such as the date, time and pages of a visit, we will do our best.
You don't have to give us any personal data: the site works fully without analytics. We make no automated decisions about you and do no profiling.
You can complain to the Czech data protection authority, the Úřad pro ochranu osobních údajů (uoou.gov.cz), or to the authority in the EU country where you live.
Changes
If what we collect changes, we will update this page and the date at the top. If a change needs your consent again, the cookie banner will ask you.