Privacy & security
Sourceglass is built on one posture: no CDN, end to end. The app and the image proxy are bare origins, so this claim is true and verifiable rather than a slogan. We also run no third-party analytics.
Who sees what
| Party | Sees |
|---|---|
| You → our proxy | Our proxy sees your IP address, exactly as any web server does. No CDN sits in front of it. |
| Any CDN | Nothing. There is no CDN in the path. |
| Our proxy → the image host | The image host sees our IP address. It never sees yours, and it never sees a referrer, a cookie, or your browser. |
| Our logs | Nothing about your searches or the images you view. We do not log URLs or response bodies; image capabilities are short-lived signed tokens, not stored history. |
The one thing we cannot hide is the network itself: the host that routes the packets can see your IP address. That is unavoidable for any site you visit, and we state it here rather than pretend otherwise.
The tradeoff we accepted
A CDN is a shield against denial-of-service traffic. By removing it, we gave up that shield in exchange for the privacy above. We mitigate the risk with signed, short-lived image capabilities, strict rate limits and concurrency caps, and a fetch path that never lets a third party see you. This is a deliberate trade, not an oversight.
Responsible disclosure
Security researchers are allies, not adversaries. If you find a vulnerability — in the image proxy, the token scheme, the SSRF guard, or anything else — please report it privately first, and give us a reasonable window to fix it before public disclosure. We will credit you if you would like.
Contact: novatechnocrat@foundrylinux.com
Please do not test against other users or degrade the service for others. If you are unsure whether a test is in scope, ask first.