Your data and your privacy
Your models never leave your machine. What anonymous usage counts hammer8 keeps, and how to switch them off.
hammer8 runs entirely in your browser. There is no account, no server that stores your work, and no upload step.
Your models stay on your machine
Everything you draw lives in your browser's local storage and in the files you save yourself. Nothing about the geometry, the dimensions, or the file names is ever sent anywhere.
That is a property of how the app is built, not a promise about a setting: there is no backend to send a model to. It is also why the app keeps working with the network off.
Usage counts
To learn which features are actually used and which ones fail, hammer8 records a small number of anonymous counts:
- Which feature types you create — that an extrude was made, not what it extruded.
- Which features fail to rebuild, grouped into broad reasons such as "invalid geometry" or "out of range".
- How commands are launched — ribbon, ⌘K palette, keyboard shortcut, right-click menu, or the AI assistant.
- Which export formats you pick, and how big a document is in rough bands (empty / small / medium / large).
- A per-visit summary — how long the visit was, and how many features and errors it contained.
What is never recorded
- File names, folder paths, or anything you type.
- Geometry, dimensions, or any part of a model.
- Your AI provider key, or anything you send to or receive from the assistant.
- Any identifier that links two visits together. There is no cookie and no user id — each visit gets a random label that is discarded when you close the tab.
This is enforced in code, not by policy: any value that is not a short plain identifier or a number is replaced with <redacted> before it is stored.
Turning it off
Press ⌘K (Ctrl+K on Windows/Linux), type analytics, and select the toggle. The label shows the current state.
Switching it off stops collection immediately and discards anything already queued.
Where it goes
The counts listed above are sent to PostHog, a product-analytics service, on servers in the United States. Nothing else is.
A few specifics worth stating plainly:
- No profile is created for you. Each batch is marked anonymous, so PostHog stores the counts without building a per-person record.
- Sending is batched and offline-tolerant. Counts wait on your device and go out later; with no network they simply wait. Nothing is retried forever, and nothing is sent while the app is opted out.
- The published site only. Development and preview builds keep their counts locally and send nothing.
If you would rather not take part, the toggle above stops both the collection and the sending, immediately.