Privacy

This page explains exactly what data Reflex / FastCrest collects when you visit fastcrest.com, docs.fastcrest.com, or use reflex chat. Plain English, no legalese-for-legalese’s-sake.

If you want the short version: the only personal data we ever store is the email you optionally type into the newsletter form. Everything else is either anonymous or transient.

What we collect, by surface

Surface	What we collect	Where it lives	Why
fastcrest.com	Cloudflare’s standard request logs (IP, user-agent, referer, timestamp)	Cloudflare for ~24h	DDoS protection + traffic insight. Not stored long-term.
fastcrest.com newsletter form	The email you type, plus the source field (landing-newsletter), country code (from CF-IPCountry), and timestamp	Cloudflare KV namespace FASTCREST_LEADS, 5-year TTL	So we can email you when v0.8 ships. Stored as lead:<sha256(email)>.
docs.fastcrest.com	Cloudflare’s standard request logs	Cloudflare for ~24h	Same as landing.
docs.fastcrest.com “Was this helpful” widget	The page slug + your vote (up or down) + a SHA-256 hash of (IP, day, page)	Cloudflare KV namespace FASTCREST_FEEDBACK	Per-page analytics, deduped per-IP-per-day. We never store your raw IP.
reflex chat (chat.fastcrest.com/chat)	Your prompt is forwarded to OpenAI. We don’t log the content. We do count requests by client_id (or fallback to IP hash) for the 100/day rate limit.	Cloudflare KV namespace FASTCREST_RATE_LIMIT, 36h TTL	Rate limiting only. The actual chat content never lands in our storage.

That’s the full list.

What we never collect

• Cookies. We set zero cookies on either site. (localStorage is used for theme preference + per-page feedback memory; that data lives only in your browser and never reaches our server.)
• IP addresses in long-term storage. The newsletter row stores country code only. The feedback widget stores a hash that includes your IP but you cannot recover the IP from it.
• Browser fingerprints, mouse movements, scroll heatmaps, session replay.
• Third-party trackers. We don’t run Google Analytics, Mixpanel, Amplitude, Hotjar, or anything similar.
• Your usage of the Reflex CLI itself. The CLI is open source and makes no telemetry calls; only reflex chat reaches a network endpoint, and that’s documented above.

Third parties

Three companies see your data when you interact with the sites. Here’s exactly what each one sees:

• Cloudflare — handles DNS, CDN, the Worker that runs chat.fastcrest.com, and KV storage. They see your IP and request metadata. Their privacy policy: cloudflare.com/privacypolicy.
• OpenAI — only when you use reflex chat. The Worker forwards your prompt to OpenAI’s chat/completions endpoint. They see the prompt content (model + reasoning_effort baked in by us; no other data added). Their data policy: openai.com/policies/api-data-usage-policies.
• GitHub — when you click any Edit on GitHub link or visit github.com/FastCrest/reflex-vla. They see standard browser metadata. Their privacy policy: github.com/site/privacy.

We don’t share data with any third party not listed above.

Your rights

Under GDPR (EU) and CCPA (California), you can:

• Know what we have — for emails, that’s just your email + source + country + signup timestamp. For feedback votes, we don’t have a lookup mechanism per-user (the data is hash-keyed, not email-keyed). To request your record, email hello@fastcrest.com.
• Delete your data — for the newsletter, click any unsubscribe link in an email we send, or visit https://fastcrest.com/unsubscribe?t=<token> (the token comes back in the response when you subscribe). For other deletions, email hello@fastcrest.com.
• Opt out of sale of your data — there’s nothing to opt out of; we don’t sell data.

We respond to deletion requests within 30 days, usually within 1-2 business days.

When this changes

If we add a new data-collection surface (e.g. analytics, account auth, a paid Pro signup), we update this page first and announce the change in the next release-notes post. The page lives in git at docs/src/content/docs/about/privacy.mdx so the diff is auditable.

Contact

hello@fastcrest.com — for any data-related question, request, or complaint. One person reads this inbox; expect a real human response within 1-2 business days.

Last updated: 2026-05-01.