He watches the clock. The camera stays here.
The camera is on only during a set.
Frames are scored in the overlay and thrown away. Nothing is stored, nothing is sent, there is no clip. Refuse it and nothing counts. No screen capture. No file contents.
The hook sends a tool name and a timestamp.
That is the entire payload: which tool ran, in which session, when. Not the prompt, not the arguments, not the file paths, not the diff.
Your reps live on your machine.
The desktop app keeps everything in a local SQLite file and works offline forever. If you never sign in, nothing leaves the machine at all.
If you do sign in, only daily totals sync.
Reps, sets and minutes converted — per day, in aggregate. Never a tool name, never a project path, never a timestamp precise enough to reconstruct your working day. The handle you pick in Settings is the name on the weekly league. Pro wears that table; the name is what it prints. You can change it once a week. An optional X username is stored as a link they typed — not a photo, not verified, not an OAuth login.
Email is the only personal data on this site until you pay.
One launch email and one reminder if your pre-season streak dies. No list rental, no drip sequence. Every send carries a link that deletes your row outright — not just unsubscribes it.
Paying is optional personal data.
The squat discount lives in this tab as a count. Not a name. Hit Pay and Creem collects what a card checkout needs. We do not store the card. We store the checkout id, the email Creem has, and the license key so we can mail it and so you can ask for it back. The key is an HMAC. Not a profile.
There is no cookie banner because there are no tracking cookies.
Two first-party cookies exist and both are functional: one remembers who referred you so an invite counts on the board, one remembers your handle so your round moves your own position. No cash, no payout. Page hits go to Usermaven on a strict, cookieless setting. Camera frames never do.
The data lives on a machine we rent.
We operate from Costa Rica. Self-hosted Postgres on a single VPS behind Cloudflare. Payments go through Creem (Armitage Labs OÜ, Estonia), the merchant of record. Card details never touch our box. Creem gets the email for the receipt. We keep that address next to the key. Card details never touch our box. Their policy: creem.io/privacy. Ours is this page.
Deleting means deleting.
Email hey@claudio.fit. One request removes the waitlist row, every round attached to it, the referral code, and the Pro key we stored for that email. There is no soft-delete column and no thirty-day grace period.
Write.
hey@claudio.fit. Keys, refunds, the camera lying, a row you want gone. Same address Creem prints on the receipt.