Privacy Policy

ModelFit ("ModelFit", "we", "us") operates modelfit.io and is the data controller for the limited personal data described below. ModelFit is an independent project.

You can reach us about anything in this policy at privacy@modelfit.io or by post at: 1021 E Lincolnway, Suite 8081, Cheyenne, WY 82001, USA.

We are deliberately data-light. Apart from the visit statistics described below, the only personal data we collect is what you actively give us:

• Newsletter email address. If you subscribe to the weekly local-AI email, we store your email address. Alongside it we keep the date and time you signed up, a one-time random token (used only to identify and unsubscribe you), the page you signed up from (e.g. "wizard-result"), and a record that you consented (a timestamp and a pseudonymised reference) so we can demonstrate your opt-in if asked. Legal basis: your consent (GDPR Art. 6(1)(a)).
• Your machine, for model alerts. If you sign up for a model alert, we also store the machine you picked (for example "MacBook Pro, M4 Pro, 48 GB" or "RTX 4090"). We use it only to email you when a better local model fits that machine, and to count readers by hardware type (aggregate numbers, never individual records). The alert form says it also signs you up for the weekly email: you receive two emails, the alert and the weekly, and each can be stopped on its own, in one click, from the unsubscribe page. Legal basis: your consent (GDPR Art. 6(1)(a)).
• A configuration you email yourself. If you use "Email it to me" in the configurator, Resend delivers that one email with the link, and we do not store your address unless you also tick the model alert box (then the model alert entry above applies).
• Email you send us. If you email us, we keep that correspondence to reply to you.

Visit statistics (Google Analytics). We use Google Analytics 4 (provided by Google LLC and Google Ireland Limited) to count visits and to see which pages and signup forms work. We use it for aggregate reporting only. Google signals and ad personalization are switched off, and we do not use the data for advertising. Google documents that Google Analytics 4 does not log or store IP addresses. Legal basis: our legitimate interest (GDPR Art. 6(1)(f)) in understanding, in aggregate, how the site is used. Cookies and how to opt out are covered in the next section.

Beyond that, we run no advertising pixels, no fingerprinting and no other third-party tracking. We do not build profiles, and the site never asks for your name, address, or payment details: purchases through our affiliate links happen on Amazon, and the one thing we sell, a sponsor slot (see Sponsor), is arranged by email and paid through a Stripe payment link.

Signup form counter. When a newsletter or alert form scrolls into view, your browser tells our server which form it was (for example "alert-blog-end"). We add one to a daily total for that form and keep nothing else: no IP address, no browser details, no page address, no identifier, no cookie. The totals tell us which forms are useful, nothing about you.

Config reports. If you share a config, we store what you enter (machine, model, settings, speed, note) and publish it once reviewed, with no email, account, IP address or browser details. To limit spam we keep a keyed hash of your IP address and the time for 24 hours, then delete it.

If you create a forum account, we store your email address, the handle you choose, a salted hash of your password (never the password itself), when you confirmed your email, and what you post and report. Only your handle and your posts are public; your email is never shown. We use the email to send the confirmation link and password resets, nothing else: no newsletter unless you sign up for it separately.

To limit spam we keep a keyed hash of your IP address with the time of a signup, post or sign-in attempt for 24 hours, then delete it. Moderators see handles and posts, never emails. The legal basis is the contract you enter by creating an account (Art. 6(1)(b) GDPR) and our legitimate interest in keeping the forum free of spam and abuse (Art. 6(1)(f)).

On your account page you can download all your data as a file and delete your account. Deleting removes your email, handle, password hash and sessions and wipes the text of your posts; a discussion you started is removed with its replies. Reports you filed stay, without your name or note, so moderation can finish. See also the community rules.

We set no advertising cookies. The site uses a small amount of your browser's local storage purely for features you ask for: remembering your light/dark theme choice, and remembering that you have already dismissed the newsletter pop-in so it does not nag you again, and keeping the configurations you save with "Save on this device" (their links only). These are strictly necessary for those functions, stay on your device, and are never sent to us or to anyone else.

If you sign in to the forum, we set one strictly necessary cookie, mf_session, which keeps you signed in for up to 30 days. It holds a signed session identifier only, and signing out, resetting your password or deleting your account ends it on our side.

We show no cookie banner. Google Analytics handles cookies differently depending on where you are:

• EEA, UK and Switzerland. Google Analytics runs in Consent Mode with analytics storage denied, so no analytics cookie is set. Your browser still sends cookieless pings to Google (the page, coarse device and browser information, and your approximate country), which Google uses for aggregate, modelled reports.
• Everywhere else. Google Analytics sets two first-party cookies, _ga and _ga_<ID>, which last up to 2 years and tell new visitors from returning ones.

In every region, advertising storage stays denied. To opt out, block cookies or googletagmanager.com in your browser, or install Google's Google Analytics opt-out browser add-on.

We never sell or rent your data. We use a small number of service providers (processors) strictly to run the site, the newsletter and our visit statistics:

• Resend (resend.com) delivers our newsletter emails. Your email address is processed by Resend to send you mail you asked for, together with the machine you registered for alerts, if any, and the confirmation and password reset emails of a forum account.
• Cloudflare fronts the site (CDN and security) and processes standard network/server logs, including IP addresses, transiently to serve and protect the site.
• Google Analytics (Google LLC / Google Ireland Limited) counts visits to the site. It receives the pages you view and coarse device, browser and country information, plus the analytics cookie identifier where a cookie is set. Google LLC is certified under the EU-US Data Privacy Framework.
• Our hosting provider stores the site and the subscriber list on a secured server.

When you click an affiliate "Where to Buy" link, you leave our site and the destination (Amazon) sets its own cookies and applies its own privacy policy. We never send your identity to them; the link simply tells them the visit came from us. See our affiliate disclosure.

We keep your newsletter email until you unsubscribe. Unsubscribing (one click, from any email) removes your address from our list. We then keep only an anonymous count line (the date you left, your signup date and the form you signed up from, never your address) so we can see how many readers leave. If you only stop the model alert, we keep your address for the weekly email and stop using your machine for alerts.

We keep a forum account until you delete it. Deleting it removes your email, handle and the text of your posts. A discussion you started that other members replied to stays, with its title and their replies, under [deleted account]. Confirmation and reset links expire after 48 hours and 1 hour, and the hashed IP addresses used against spam after 24 hours.

Google Analytics keeps event data for 14 months, after which Google deletes it.

Some of our processors (e.g. Resend, Cloudflare, Google) are US-based and may process data outside the EEA/UK. Resend and Cloudflare do so under their own standard contractual clauses, and Google LLC is certified under the EU-US Data Privacy Framework. The data involved is your email address, standard network logs and, for Google Analytics, the visit data described above.

Wherever you live, you can unsubscribe at any time using the one-click link in every email. If you are in the EU, UK, or a similar regime, you also have the right to access, correct, delete, export, or restrict the processing of your data, and to withdraw consent at any time. If you are a California resident, we confirm we do not sell or "share" your personal information and run no cross-context behavioural advertising.

Forum members can download their data and delete their account themselves, on the account page.

To exercise any of these, email privacy@modelfit.io. We will respond within 30 days. You also have the right to complain to your local data-protection authority.

modelfit.io is a tool for people choosing computer hardware and AI software. It is not directed at children under 16, and we do not knowingly collect their data.

If we change how we handle data, we will update this page and the "last updated" date above. Questions? hi@modelfit.io. See also our Terms of Service.