# Steering: privacy

Privacy is paramount in Solnix. No PII, ever, in telemetry or logs.

- **Telemetry is off by default** and opt-in (the "community pulse").
- **Visitor geo is country-level aggregate only.** The connecting IP is resolved
  to a 2-letter country **in memory** and then discarded — never logged, never
  stored. Only the country leaves the edge.
- **k-anonymity** on aggregates; **Do Not Track is honoured**; bot/LLM
  user-agents are filtered server-side so they don't skew (or get counted in)
  human stats.
- **No tracking cookies, no third-party analytics.** GeoIP is self-hosted
  (DB-IP Lite, CC-BY); no third party sees a visitor.
- **The crown jewels are the DB and git**, backed up; cache objects are durable
  in object storage. Backups never include visitor PII because none is kept.

For agents and contributors: do not add anything that records a user's identity,
IP, or precise location. If a feature seems to need it, it almost certainly
doesn't — find the aggregate, in-memory, or client-side alternative.