This release includes 1 breaking change for platform teams planning a safe upgrade.
Published 1mo
Productivity & Wikis
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
accessibility
byok
conversational-ai
digital-humanities
edtech
education
+14 more
gdpr
historical-figures
humanities
llm
local-ai
nonprofit
openrouter
philosophy
privacy
privacy-first
self-hosted
self-hosted-ai
stoicism
voice-ai
Affected surfaces
auth
Summary
AI summaryGoogle‑ad consent now required for conversion tracking, conversation history encrypted at rest, trust badge reworded, diagnostic sheet removed.
Full changelog
Privacy claims brought fully in line with the code.
- Google-ad-only consent for conversion tracking. Conversions reach Google only after a visitor who arrived from a Google ad opts in (one optional checkbox, no site-wide banner, withdrawable in Settings). The upload carries a Consent Mode v2 signal.
- Conversation history is encrypted at rest in IndexedDB with AES-256-GCM.
- Trust badge reworded to "No tracking cookies, no profiling", a claim provable for every visitor.
- README, MEASUREMENT, the security docs, and the legal pages now say exactly what the code does. The gclid is described as personal data on a consent basis and is kept out of our analytics.
- Removed the diagnostic Google Sheet (the only place a full click ID was retained) and the shallow "Start Exploring" conversion.
- English privacy policy added at /privacy.
Full details in CHANGELOG.md.
Breaking Changes
- Removed the diagnostic Google Sheet and the shallow "Start Exploring" conversion.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Agoracosmica
All releases →Beta — feedback welcome: [email protected]