Privacy
Short version: the CLI never talks to the network, and this website does not track you.
The CLI and the desktop app
Transmute reads files from disk or stdin, transforms them in memory and writes the result to stdout or a file. It makes no network requests, has no accounts, no update checks and no telemetry. The one exception is the desktop app's licence activation: when you activate or deactivate a Pro licence, the app sends the licence key and a random installation id to mahope.tools, and nothing else. The engine is one file with no dependencies, so this is easy to verify in the source.
This website
transmute.run is static files served by Cloudflare Pages. It sets no cookies and loads no advertising scripts.
Visits are counted with Plausible Analytics, which we host ourselves in the EU at analytics.holstjensen.eu. It sets no cookies and stores no IP addresses or other personal data. It records the page you visit, the site that sent you, your country and your browser and device type, and it tells visitors apart with a hash that changes every day, so a visit cannot be linked to you, to another day or to another site. We only ever see the totals.
The browser playground on the front page runs the engine in your browser, inside a sandboxed frame. What you type stays on your machine.
Your theme choice (light or dark) is kept in your browser's local storage if you change it. It is never sent anywhere.
Fonts
The IBM Plex typefaces are loaded from Google Fonts, which means your browser requests the font files from Google's servers and Google sees the request the way any web server does. If you would rather avoid that, the site remains readable with fonts blocked.
Bug reports
The "Report a bug" button opens a form provided by BugBottle, another tool from the same maker. Nothing is sent until you press send. A report contains what you write, the page address, your viewport size and browser language, recent console errors, and a screenshot if you choose to attach one. Emails and card-like numbers are masked before sending. Reports go to mahope.tools, are e-mailed to Mads Holst Jensen and deleted from the server after 30 days.
Contact
Questions about any of this: mahoje.dk, or open an issue on GitHub.