Skip to main content

max / balanced_breakfast

docs: privacy policy — reflect remote-image blocking The sanitizer now strips remote img/resource URLs from feed bodies (commit 60fc35a), so the policy no longer lists remote image hosts as outbound traffic; instead it states, under "does not do", that remote images/trackers in article content are blocked to prevent IP-logging tracking pixels. Bumped the last-updated date. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Author: Max Johnson <me@maxj.phd> · 2026-07-11 17:51 UTC
Commit: 12f01bd63699cbb382404b1c124456d9fbf0bfb4
Parent: 751c826
1 file changed, +2 insertions, -2 deletions
@@ -1,6 +1,6 @@
1 1 # Balanced Breakfast — Privacy Policy
2 2
3 - *Last updated: June 4, 2026*
3 + *Last updated: July 11, 2026*
4 4
5 5 Balanced Breakfast is published by Make Creative, LLC. This policy explains what data the app handles.
6 6
@@ -25,7 +25,6 @@ The app makes outbound requests only to sources you've added:
25 25
26 26 - RSS/Atom feed URLs you subscribe to
27 27 - Public APIs (e.g. Hacker News, arXiv) that plugins are configured to query
28 - - Image hosts referenced by article content (loaded for preview rendering)
29 28 - **Update server** — the app periodically checks for new versions. The check transmits your current app version and platform; no personal data.
30 29 - **SyncKit sync** (optional, off by default) — if you enable it, the app replicates your data to a SyncKit server (makenot.work by default) using end-to-end encrypted payloads. The server stores only ciphertext; we cannot read your synced data.
31 30
@@ -37,6 +36,7 @@ We don't proxy any of these requests. Each goes directly from your device to the
37 36 - No advertising, no third-party trackers
38 37 - No data sold or shared with third parties
39 38 - No background sync or data upload unless you explicitly enable SyncKit (off by default)
39 + - No loading of remote images or resources embedded in article content — remote `img`/resource URLs in feed bodies are stripped before rendering, so a feed publisher can't use a tracking pixel to log your IP address or reading activity
40 40
41 41 ## Children
42 42