Thanachon.
Nexus

Privacy

Privacy and analytics

This page describes what the public site collects and which outside services it uses. Visitors do not need an account to read it. You can withdraw analytics consent below at any time.

Analytics (Google Analytics 4)

The site measures visits with Google Analytics 4 (GA4), when it is configured for the deployment.

  • Public pages report their path, with the query string and hash removed, plus the page title and referrer.
  • Private areas (the dashboard, sign-in, Praxis and the prototypes that need a login) report only a coarse label such as /private/dashboard/ or /private/capital-os/portfolio/. Their real addresses, page titles and referrers are not sent.
  • Events on private areas carry no user id, name, text or amount. Parameters named like those are dropped before sending.
  • Google Signals and advertising personalisation are turned off, and no user id is set.

Consent Mode v2

The site uses Google Consent Mode v2. Every signal starts denied.

  • Until you choose, analytics storage, ad storage, ad user data and ad personalisation are all denied. GA4 can still receive cookieless pings.
  • If you accept, only analytics storage is granted. The three advertising signals stay denied.
  • Your choice is kept in your browser's local storage on this device. It is not sent to a server by this site.

Your analytics choice

Current choice:

Withdrawing tells Google Consent Mode to deny analytics storage from now on. It does not affect the other services listed below.

Other services

Besides GA4, the site relies on these services.

Vercel

Hosts the site and runs Vercel Analytics, which loads on every page and does not follow the choice above.

Chatbase

The home page can load a chat assistant from chatbase.co. It loads on the home page only and is not gated by the analytics choice.

Map tiles

AtlasOS maps draw in your browser with MapLibre. Opening a map loads terrain tiles from the public elevation dataset on Amazon Web Services.

Supabase

Provides sign-in, the database for signed-in areas and the CodexOS early-access list, and stores the pictures the public pages show. Visitors to the public pages do not need an account.

Langfuse

Records server-side traces of AI calls made in signed-in areas, on servers in Japan. For CapitalOS and CareerOS these hold metadata only.

YNAB

CapitalOS reads your own budget from YNAB through its API when you sync. Nothing is sent back to YNAB, and the data stays in signed-in areas.

AI model providers

AI features in signed-in areas send prompts to model providers through OpenRouter. Each provider applies its own data policy to what it receives.

Retention

  • Your analytics choice stays in your browser until you change it or clear your site data.
  • Records kept for signed-in areas are stored in the database until they are deleted. Some, such as chat messages and sync logs, have no automatic expiry.
  • AI traces in Langfuse and analytics events in GA4 follow the retention settings of those services, not a timer of ours.
  • Images you generate or upload in CodexOS and AtlasOS are kept in storage until you delete them. Their links are unguessable but permanent.
  • If you ask for CodexOS early access, we keep your email, your language, the page you asked from and the time, only to send you that invite. Email us below to be taken off the list.

Contact

For questions or requests about your data, email thanachonfirst@hotmail.com