Ducens SHEET 06 / 08
Ducens · Sheet 06 / 08 The stance · Trust

Ducens tracks nothing, and you can check.

Every claim below comes with the test that settles it. Most of them you can run in your own browser before you finish reading this sheet. A trust page you have to take on faith is the thing it is arguing against.

The ledger

EVERY CLAIM CARRIES ITS OWN TEST06·B
What is trueHow you check it yourself
C-01

No analytics. No cookies.

Open your developer tools, network tab, and reload. Every request goes to this origin: the page itself, one script, one stylesheet, the font files, the favicon, nothing else. The storage tab is empty the same way — no cookie, no local storage, nothing to clear.

C-02

The fonts are served from here.

Same tab. Nothing loads from fonts.googleapis.com or fonts.gstatic.com. Serving fonts from Google passes your IP to Google, which German courts have treated as actionable, so all three families are served from here instead.

C-03

Nothing here fingerprints you.

Search the page source for canvas, AudioContext or enumerateDevices. There is nothing to find, because nothing on this page wants to know which browser you are.

C-04

The form logs six things, and that is the list.

Your e-mail address, timestamp on submit, the wording you were shown, both checkbox states, your IP server-side, and the consent version. Sheet 08 prints the same six beside the form, and the Datenschutz names them again in German.

C-05

The app phones home nothing by default.

The same test, one layer down: run Ducens with a network inspector open. What leaves the machine is what you sent, to the provider whose key you supplied, and nothing else. Local-first is not sealed — it means Ducens never invents traffic of its own.

C-06

A fault report carries one number.

How long the session had been running, so a fault can be placed in time. That is the entire payload. If it ever carried more than that, this row would have to say so.

This page, right now

The panel beside this is not a claim. It is C-01 performed: your browser counted what this page loaded, and the count is printed as it was found.

The measurement happens in your browser and stays there. Nothing about your visit is sent anywhere to produce it, which is the only way a number on a trust page is worth reading.

Measured here06·C
ORIGINS CONTACTED
REQUESTS THIS LOAD
THIRD-PARTY REQUESTS
STORAGE KEYS WRITTEN

READ FROM YOUR OWN BROWSER ON THIS PAGE LOAD. NOT REPORTED TO US.

Who touches the data

THREE PROCESSORS · ALL NAMED IN THE DATENSCHUTZ06·D
P-01 Brevo Sends the confirmation mail and the build letters, and holds the two lists. Brevo GmbH, Berlin · mainly EU · otherwise SCC
P-02 Vercel Serves this site. Technically necessary server logs only. Vercel Inc., USA · EU-US Data Privacy Framework
P-03 Upstash Counts sign-up attempts so the form cannot be used to mail strangers. Salted hashes, never addresses. Upstash, Inc., USA · stored in the Frankfurt region

That is the whole list. This sheet argues the stance; the Datenschutz is the legal document, it is in German, and it governs. Nothing is named here that is not named there.

Check it, then decide.

Join the waitlist
End of sheet 06 Next: Manifesto →