Privacy policy

Last updated: 2026-06-02

Who we are

RunLocalAI is operated independently. We do not run a SaaS, we do not maintain user accounts on the public site, and we have no ad-network relationship that profiles you across other sites. Contact us via the contact page for any privacy request.

Data we collect, in detail

We try to be specific because most privacy policies aren’t. Here is the full list of what gets recorded about your visit.

  • Server access logs — IP address, user agent, referrer URL, requested path, response status, timestamp. Used for security (rate-limiting abuse, debugging errors) and aggregate volume reporting. Retained for 30 days by our host (Vercel) and then purged automatically.
  • Vercel Analytics (only after consent — see below) — anonymous pageview events. Drops a first-party _vercel cookie that is used to deduplicate visitor counts. No cross-site tracking; no user identification.
  • Vercel Speed Insights (only after consent) — Web Vitals samples (CLS, LCP, INP, FCP, TTFB) tied to the page URL. Used to find pages that are slow for real users.
  • Plausible Analytics — privacy-friendly, cookieless pageview counts. Sets no cookies and stores nothing on your device; it does not track you across sites or build a profile. Aggregate traffic only, no personal identification. Suppressed if you choose “Essential only.”
  • Cookie consent state — a single rla_cookie_consent_v1 localStorage entry recording whether you clicked “Accept all” or “Essential only.” This is not a cookie and is not transmitted to any server; it only controls what scripts your browser loads on subsequent visits.
  • Theme preference — an rlai-theme localStorage entry storing “light” or “dark” for your selected theme.

The consent gate

On your first visit you see a cookie banner. Until you click one of its two buttons, the site loads no analytics, speed insights, or advertising scripts at all. Specifically:

  • Accept all — allows Vercel Analytics, Vercel Speed Insights, Plausible Analytics, and (where it has ever been configured) Google AdSense to load.
  • Essential only — only the strictly-necessary request-handling logs apply. No analytics scripts execute. No advertising scripts execute.

You can revoke consent at any time by clearing the rla_cookie_consent_v1 entry in your browser’s site-data settings. The banner will reappear on your next visit.

Legal basis for processing (EU/UK)

  • Access logs — Art. 6(1)(f) GDPR (legitimate interest in operating the site securely). The data retained is the minimum needed for security and aggregate volume reporting.
  • Analytics + Speed Insights — Art. 6(1)(a) GDPR (consent). We do not load these scripts until you click Accept on the banner.
  • Advertising (if configured) — Art. 6(1)(a) GDPR (consent). AdSense is gated behind the same consent click; if it’s ever enabled on this site, you will see Google’s own consent dialog stacked on top.

Third-party services

The site relies on these third parties, each with their own privacy policy:

  • Vercel — hosting + Analytics + Speed Insights.
  • Plausible Analytics — cookieless, privacy-friendly traffic analytics. EU-hosted, no cookies, no cross-site tracking, no personal data.
  • Neon — database. Neon stores published catalog content; it does not see your visit data.
  • Google AdSense — only loaded after consent. Not currently active on this domain; documented for transparency in case it is enabled later.
  • Amazon Associates, Newegg, B&H, and other affiliate networks — see “Affiliate links” below.

Affiliate links

When you click an affiliate link, the destination retailer (Amazon, Newegg, etc.) may set their own cookies attributing the referral to RunLocalAI. We do not see your purchase details — only aggregate commission reports that tell us how many people clicked and how many converted, never who. Affiliate links carry a tag in the URL (e.g. ?tag=fredoline-20 for Amazon) that the retailer uses to associate the click with us. The link itself does not transmit any data we collected about your visit.

Your rights

If you are an EU/UK resident, GDPR applies. If you are a California resident, CCPA applies. You have the right to access, correct, or delete personal data we hold about you, and to withdraw consent at any time (which you can also do from the banner described above). To exercise these rights, contact us via the contact page. We respond within 30 days. We do not require an account to process requests; if your data is in our server access logs we will identify it from the IP and timestamp window you provide.

Children

The site is not directed at children under 13 (or under 16 where GDPR member-state law requires that threshold). We do not knowingly collect data from minors. If you believe we have inadvertently collected data from a child, contact us and we will delete it.

Changes

We may update this policy. Material changes will be flagged on the homepage for at least 30 days. The “Last updated” date at the top of this page reflects the most recent revision.