Privacy — token.langx.io
This page
is just a page
Effective 27 August 2026. It covers token.langx.io only. The LangX app is a different thing and has its own policy — see the last section.
Nothing to give us
There is no account here, no sign-up, no login, no wallet and no form of any kind. There is no field on this page you could type into even if you wanted to, so there is nothing you can submit to us and nothing for us to keep.
Nothing on your device
No cookies. No local storage. This page does not write anything to your browser, which is also why it has no cookie banner — there is nothing to ask you to agree to.
Analytics that store nothing. This page counts page views, and one event — a click on a link that leaves for the app — with PostHog on its European cloud, in what PostHog calls cookieless mode. It writes no cookie and no storage entry, which is why the paragraph above still holds and why there is still no cookie banner. A visitor is counted with a hash PostHog computes on its own side from a salt it throws away daily, so a reader today cannot be recognised as the same one tomorrow. There is no session recording, no tag manager and no advertising pixel. Until September 2026 this section said there were no analytics at all; it changed in the same release that switched them on.
And a second, thinner one that predates it. This page is served through Cloudflare, and Cloudflare measures the traffic it delivers: the page, the link that referred you, your country, and which browser, operating system and device type asked. It is switched on in Cloudflare’s dashboard rather than by anything in this repository, which is how it went unnamed here for longer than it should have. It writes nothing to your browser either, so the paragraph above still holds.
What your browser fetches
Four requests leave your browser for somewhere other than this site. Each is visible to somebody, so here they are rather than hidden behind “we collect nothing”.
Google Fonts
The two typefaces on this page are loaded from Google’s font service. Google therefore sees your IP address and your browser’s user agent, the same as it would for any page that uses them. It sets no cookie, and we send it nothing about you.
The high-score list
The board is fetched from the LangX API when the page loads, and again once a minute while the tab is open. Our own server sees the IP address that asked, uses it to answer and to rate-limit abuse, and does not attach it to anybody’s account.
PostHog
The analytics above. PostHog’s script is served from this site rather than from its CDN, and it is the build with nothing left to fetch, so the single request your browser makes to PostHog is the one carrying the page views themselves, to its European endpoint. It sets no cookie and is told nothing about you beyond which page you are on.
Cloudflare
The measurement described above. Cloudflare serves this page, so it sees the request either way; the extra part is a small script it injects from its own domain to record the page, referrer, country, browser, operating system and device type. It sets no cookie and writes nothing to your browser.
The board shows usernames and token balances, which are already visible to everyone inside the app. It carries nothing else about anyone.
Hosting
Like every web server, the host that serves you this file sees the request that asked for it — your IP address and user agent — because it cannot send you a page otherwise. That is used to deliver and protect the site and for nothing else.
The app is a different matter
LangX itself does collect data — it has accounts, profiles and private conversations, and it could not work otherwise. What it stores, who receives it and how to get rid of it is set out in full there, not here:
Your token balance is part of your LangX account, so it is covered by that policy and it goes when your account goes.
Questions
Write to [email protected]. If this page ever starts collecting something, this is the page that will say so, and it will say so before it does.