0xWisco_Labs_
Privacy notice

What we collect, and what we don't

Effective October 26, 2026

The short version
  • The website has no cookies, no analytics and no trackers.
  • The API never stores your IP address, the contents of your requirements file, or the names of private packages.
  • Usage records are deleted after 90 days. We don't sell or share them.

Wisco Labs runs the website at wiscolabs.dev and the API at api.wiscolabs.dev. This notice covers both. Questions go to hello@wiscolabs.dev.

The website

The site is static pages and nothing else. It sets no cookies, runs no analytics, and loads its fonts from this site instead of a third party. The status panel on the home page asks the API whether it's up, straight from your browser; that request is handled like any other API call below.

The API

Each call is recorded so we can see whether anyone uses this and what to build next. Here is everything in a record:

We keepWe never keep
When the call happened, which tool it used, whether it succeeded, and how long it tookYour IP address. It's turned into a salted one-way hash, which lets us count distinct callers without knowing who they are.
The client's user agent (for example, the name of the AI tool making the call)The contents of a requirements file. We keep only how many lines it had.
Names of public packages you asked about, such as flask or requestsNames of packages that aren't public. Anything we don't recognize as a public package is counted as "other" and the name is dropped.
Short parameters such as version numbersAny other free text you send.

Records are deleted after 90 days. Rate limiting uses the same hash and is kept in memory only.

What we do with it

We use these records to count usage, find errors, see which packages and tools are popular, and decide what to build. We don't sell them, share them, or use them for advertising. We may publish totals, such as the most-requested packages, that can't be traced to any caller.

Cloudflare

Cloudflare delivers both the website and the API, so your connection passes through its network, and it processes your IP address to do that and to block attacks. Its handling is covered by Cloudflare's privacy policy.

Where the data lives

The API runs on servers operated by Wisco Labs in the United States.

Your choices

Because we don't keep anything that identifies you, we usually can't find records belonging to a particular person. If you have a question or a request about your data, email us and we'll do what we can.

Children

The service is built for software developers and isn't directed at children.

Changes

If this notice changes, the new version will be posted here with a new effective date. If we ever start collecting something new, we'll say so here before we do.