Privacy

Analytics

Effective date: 21 October 2026

We count visits to fezu.dev and to the VCode app at app.fezu.dev (and at their former addresses v-code.dev and app.v-code.dev, which still work), in a browser or the desktop app, and installs of VCode, with our own analytics service, analytics.vcasa.dev. We run it ourselves on our own server in the United Kingdom. Cloudflare carries the requests to it. We do not give the analytics data to any other company, and no other party collects data about you across sites through this service.

What we collect and how long we keep it

• Identifiers. Your IP address and browser user agent reach our service with each request. We use them only while handling that request, and never store or log them. From your IP address with its last part removed, your user agent and the site name, we compute a visitor code with a secret key that changes every day. The code is pseudonymous for 24 hours, then deleted: it is kept in memory only, never written to disk, and deleted with the day's key shortly after midnight UTC. We use it only to count daily visitors and how many viewed a single page. It cannot link your visits across days or across our sites.
• Internet activity. The page address without its query string, the domain of the site that linked to you, your browser and its major version, your operating system, your device type (desktop, mobile or tablet, from the user agent and screen width), clicks on marked buttons and links such as the sign-up buttons, time on page, how far you scrolled, and page-speed timings. We store these only as aggregated counts per day.
• Coarse location. Cloudflare works out your country, region and city from your IP address and passes them to our service. We store them only as aggregated counts per day.

Aggregated counts are kept indefinitely. They contain no identifier and are not linked to the visitor code. We commit not to try to re-identify any person from them.

The service sets no cookies. It writes to your browser's storage only if you opt out (below).

Why

To understand how fezu.dev and the VCode app are used and keep them working well. Our lawful basis is our legitimate interest in measuring the use of our own site and app.

Hosts

fezu.dev is hosted by Vercel, and the analytics service is reached through Cloudflare. Both keep their own request logs, which include IP addresses, under their own privacy policies. "Not stored" above is about our service only.

Your choices

• Opt out: use the buttons below. This stores one marker in your browser for this site and stops the analytics script from sending anything. It applies to this browser and this site address only. Clearing site data, or Safari after 7 days without a visit, removes it.
• Global Privacy Control: if your browser sends a GPC signal, we treat it as an opt-out and send nothing.

Opt out of analytics Opt back in

The VCode app

The app at app.fezu.dev, and the desktop app, which opens the same address, count each time they open, the same way as fezu.dev: the page address, your browser, operating system and device type, and your coarse location, as daily counts. Nothing about your tabs, your computers or your account is sent. The opt-out buttons above cover fezu.dev only; Global Privacy Control covers the app in a browser.

The VCode installer

The installer sends install events, "install started", "install completed" and "VCode launched", with your operating system and the app version, to our service. Each install event exposes your IP address to our analytics service, which does not use or store it; Cloudflare passes us your country, which we store only as an aggregated count. No ID is sent. The hourly updater sends no events: it only downloads the list of releases from dl.fezu.dev, which Cloudflare serves. The opt-out above and Global Privacy Control do not cover the installer. You can turn the install events off with the Send install counts box on Add a workstation, or by setting V_CODE_NO_ANALYTICS=1 before you install.

When you install VCode without signing in, the installer asks for a 30-day trial. It sends your computer's name, the public key VCode made for it, and a one-way hash of your computer's machine ID; the ID itself never leaves your computer. We make an account with no email for the trial. When you log in with your email on a browser or app of that trial, its computers move to your email account and the trial account is deleted. We keep the hash and the public key after that account is deleted, so that each computer gets one trial. The hash is not secret: other programs on your computer can read the machine ID it comes from. Someone who knows your computer's hash and asks for a trial with it before you do sets when your computer's trial ends; they never get your account or reach your computer.

The trial request and a login are different from the install events: to limit how many trials and login codes one network can ask for, fezu.dev keeps a hash of the IP address the request came from, made with a secret key (for IPv6, also of its /48, the network block the address belongs to). The counters that use it last a day at most; the hash stored with a login code goes when the code expires.

Google Analytics

The homepage, the FAQ, the docs, the guides and this page also ask whether you accept Google Analytics. Nothing goes to Google and Google sets no cookie unless you accept. If you accept, Google Analytics sets its cookies and sends your visits to Google under Google's privacy policy. The Cookies button in the footer of those pages changes your answer. The opt-out above does not cover Google Analytics.

Selling and sharing

We do not sell or share personal information.

Your account

When you create an account, we keep two things about how you found VCode:

• The label of the link you arrived by, if it had one. A link we post, for example in a post or a video, can end in a label such as ?ref=reddit-demo. The label stays in the page address as you move around fezu.dev. We set no cookie for it and store nothing in your browser.
• Your answer to "How did you hear about VCode?" on the account page, if you give one.

We use them to learn which posts and videos bring people. They stay in our database with your account and go to no other company. They are deleted with your account.

Reports you send with /vcode-report (the title and text your agent wrote, and which workstation sent it) are kept with your account and deleted with it. Each report is also kept in our private issue tracker and sent to our support inbox, with your account's email address in the inbox copy only. When we close or reject a report, we email that address once to tell you, with our reply if we wrote one. Screenshots attached to a report are kept privately, in our own Cloudflare storage, until the report is resolved, and the oldest are removed when that storage is full.

Payments

Paddle sells VCode as our reseller and Merchant of Record, and handles your payment under its own privacy policy. We never see your card. Paddle tells us your plan, when it ends, and its customer and subscription ids, and we keep these with your account. Our billing page loads Paddle's script, which Paddle uses to show its checkout and to let you update your card. If a payment fails, Paddle's email links to our payment page, which loads the same script. Paddle's card form there also loads scripts and fonts from ProfitWell (part of Paddle), Sentry, Cloudflare and Google Fonts, which see your IP address.

Who we are

VCode, a sole trader in the United Kingdom, is the data controller for the personal data described on this page. Email support@fezu.dev with any question about your data, or to ask for a copy or its deletion.

Notice at collection

When you use fezu.dev, our analytics service processes your IP address and browser user agent while handling each request and does not store them. It keeps a pseudonymous visitor code for 24 hours, then deletes it, and keeps aggregated daily counts of pages viewed, referring sites, browser, operating system, device type, clicks on marked links, time on page, scroll depth, page-speed timings and country, region and city. We use these to measure how the site is used. We do not sell or share personal information. Details and the opt-out are in the Analytics section above.