we dont track YOU!
+we don’t track you!
- We don’t collect any data about you. No telemetry, no trackers! Because Poke is free software, you can also check the source and self-host. + We don’t collect personal data. No trackers, no third-party analytics. Because Poke is free software, you can read the code and self-host. + For transparency: this instance keeps anonymous, local-only usage counts (see “/api/stats” below) — no IPs, no cookies, no fingerprinting.
What’s New — Policy Update - October 11, 2025 + November 7, 2025
-- Highlights: -
+Highlights:
-
-
- New UI: simpler and better layout (yay!) +
- New section: Anonymous Usage Statistics (
/api/stats) — enabled by default, local-only, no personal data.
+ - TL;DR updated: clarified anonymous counts vs. personal data. +
- Cookies & Storage: disclosed anonymous localStorage ID used for stats.
Preamble
- Welcome to Poke’s Privacy Policy. We don’t collect data about you and we don’t run telemetry. Poke is free software you can read, remix, and run yourself. + Welcome to Poke’s Privacy Policy. We don’t collect personal data and we don’t use trackers. Poke is free software you can read, remix, and run yourself.
Not legal advice lol
TL;DR
-
-
- No data collected. at all!! -
- No telemetry. We don’t phone home. +
- No personal data collected. +
- Anonymous local-only stats enabled by default. No IPs, no cookies, no fingerprinting, no third parties.
- No third-party trackers. Yippe!! -
- YouTube can’t see what you watch here. Its all done on the backend. +
- YouTube can’t see what you watch here. It’s all done on the backend.
- Poke Account: no email required, no personal info needed.
- Poke Maps: uses OpenStreetMap data; map tiles/attribution may have separate privacy rules depending on the tile server you use. -
- No required cookies. Preferences (like theme or layout) may live in local storage on your device. +
- No required cookies. Preferences and the anonymous stats ID live in local storage on your device.
Initiative Site Privacy
The informational website at initiative.poketube.fun does not collect personal information. - Since the website is hosted on codeberg pages, the Codeberg privacy policy applies: - View it Here!. + Since the website is hosted on Codeberg Pages, the Codeberg privacy policy applies: + View it here.
What We Do/Don’t Collect
-We collect nothing about you
+We collect no personal data about you
- We don’t store IP addresses, user-agent fingerprints, unique identifiers, emails, names—none of it. There’s no telemetry or “anonymous crash reports.” + We don’t store IP addresses, fingerprinting data, emails, names—none of it. There’s no third-party analytics or ads. +
+What exists briefly so the internet works
++ Every time you open a page, your browser and Poke’s server exchange a small amount of technical data — this is simply how the web works. + Without this back-and-forth, pages couldn’t load, images wouldn’t display, and requests wouldn’t reach the right place. +
++ When your browser requests a page, the server (which uses Nginx) momentarily processes information such as the requested URL, + the response code, and the time it took to deliver the page. These details may appear in access logs briefly for operational health and security. + On Poke’s primary instance, these logs are kept for the shortest technically feasible duration and are not linked to any personal data.
What exists briefly so the internet works
-- Every time you open a page, your browser and Poke’s server exchange a small amount of technical data — this is simply how the web works. - Without this back-and-forth, pages couldn’t load, images wouldn’t display, and requests wouldn’t reach the right place. -
-- When your browser requests a page, the server (which uses Nginx) momentarily processes information such as your IP address, the requested URL, the response code, and the time it took to deliver the page. - This data is known as connection metadata — it’s automatically generated by all web servers as part of the HTTP standard. -
-- These minimal details may briefly appear in Nginx access logs. - Such logs are necessary for the server to function correctly — for example, to detect broken routes, prevent abuse, monitor uptime, or fix routing bugs. - However, on Poke’s primary instance, these logs are kept for the shortest technically feasible duration and are not linked to any personally identifying data. - They exist purely for operational health and security — never for tracking or analytics. -
-- No cookies, user-agents, browser fingerprints, or other identifiers are stored or analyzed. - Once the request is processed, the transient connection data fades away — leaving no persistent record that can be used to identify you. -
-Poke Account
@@ -290,287 +284,203 @@Optional Anonymous Usage Statistics (/api/stats)
-- This instance of Poke may optionally record basic, anonymous usage counts to help improve performance and understand what videos are popular. -
-This telemetry is fully optional and off by default. Instance admins may enable it manually.
- -When enabled, the system stores:
--
-
- Video ID that was viewed (example:
?v=VIDEOID)
- - Anonymous unique instance ID stored in your browser’s localStorage (not a cookie) -
- Browser type (e.g. Firefox, Chromium) -
- Operating system type (e.g. GNU/Linux, Android) -
What is NOT collected:
--
-
- No IP addresses -
- No cookies -
- No account data -
- No fingerprinting -
- No sharing with third parties -
- No ads, analytics platforms, or trackers -
- These stats exist only locally on this instance and are used strictly to improve the service and see which videos are watched most. - You can inspect the code on Codeberg to verify exactly what it does. -
- -Disable telemetry: If you self-host, you can turn this off in telemetryConfig in the server code.
If telemetry is disabled, /api/stats will return empty data.
-Anonymous Usage Statistics (/api/stats)
+ + This instance of Poke collects anonymous, local-only usage counts to understand which videos are popular and which platforms people visit from. + This improves performance and feature decisions. +
+-
+
- Enabled by default. Instance operators may disable it in server configuration. +
- What is recorded: video ID (
?v=…), an anonymous random viewer ID stored in localStorage (not a cookie), + browser type (e.g., Firefox, Chromium), and operating system family (e.g., GNU/Linux, Android).
+ - What is not collected: IP address, cookies, account data, full user-agent string, fingerprinting, personal information. +
- Where it lives: the counts are stored on this server only and are never sent to third parties. +
- Public API behavior:
/api/statsexposes only aggregate data (e.g., top 10 videos, browser/OS totals, total unique users). Individual IDs are never shown.
+
+ Poke is free software — you can inspect the source to verify this behavior or turn it off when self-hosting. +
+OpenStreetMap
-- Poke Maps uses data from OpenStreetMap — a community-driven, free-licensed world map built by thousands of volunteer contributors. -
-- When you visit /map, Poke displays OpenStreetMap through a simple <iframe> element embedded directly into the site. - This means the map interface and tiles (streets, landmarks, terrain, etc.) are loaded from OpenStreetMap’s own tile servers rather than from Poke’s infrastructure. -
-- Poke does not proxy or modify these map requests — your browser connects directly to the third-party domain - openstreetmap.org - (and its associated tile servers) in order to display the map visuals. -
-- While Poke itself does not collect or log any identifying information about your visit to the map, OpenStreetMap’s servers may process standard connection details (such as IP address, timestamp, and request type) as part of normal web delivery. - You can read more in their official - OpenStreetMap Foundation Privacy Policy. -
-Weather Pages & Services
-- Poke’s weather pages use third-party, privacy-respecting services to resolve places and fetch forecasts. -
- -Geocoding / Place Lookup
-- Uses nominatim.openstreetmap.org (OpenStreetMap Nominatim). - Privacy: OSMF Privacy Policy. -
-How it works:
--
-
- - The request is always proxied through Poke’s backend — never directly from your browser. - (See source) - -
Forecast Data
-- Uses open-meteo.com for weather forecasts. - Privacy: Open-Meteo Terms & Privacy. -
-How it works:
--
-
- - All forecast queries are proxied through Poke’s backend. Your browser never connects to Open-Meteo directly. - -
- - Only essential parameters (latitude, longitude, units, etc.) are forwarded. - See source here. - -
OpenStreetMap
- Poke does not add trackers to these requests. However, when third-party services are contacted (directly or via proxy), - their respective privacy policies apply to those specific requests. + Poke Maps uses data from OpenStreetMap — a community-driven, free-licensed world map built by thousands of volunteer contributors. +
++ When you visit /map, Poke displays OpenStreetMap through a simple <iframe> element embedded directly into the site. + This means the map interface and tiles are loaded from OpenStreetMap’s tile servers rather than from Poke’s infrastructure. +
++ Poke does not proxy or modify these map requests — your browser connects directly to openstreetmap.org (and its associated tile servers). + While Poke itself does not collect or log identifying information about your visit to the map, OpenStreetMap servers may process standard connection details for delivery. + See the OpenStreetMap Foundation Privacy Policy.
Weather Pages & Services
++ Poke’s weather pages use privacy-respecting services to resolve places and fetch forecasts. +
+ +Geocoding / Place Lookup
++ Uses nominatim.openstreetmap.org (OpenStreetMap Nominatim). + Privacy: OSMF Privacy Policy. +
+How it works:
+-
+
- The request is proxied through Poke’s backend — never directly from your browser. +
Forecast Data
++ Uses open-meteo.com for weather forecasts. + Privacy: Open-Meteo Terms & Privacy. +
+How it works:
+-
+
- All forecast queries are proxied through Poke’s backend. Your browser never connects to Open-Meteo directly. +
- Only essential parameters (latitude, longitude, units, etc.) are forwarded. +
Translate Page (SimplyTranslate)
- Our translate page does not send your data directly to Google or SimplyTranslate.org from your browser.
- Instead, all requests are proxied through our own backend servers.
- When you use the page, only the necessary parameters are passed securely on the server side:
- from (source language), to (target language), and text (the content you entered).
- Your browser never connects to SimplyTranslate.org directly.
+ Our translate page does not send your data directly to Google or SimplyTranslate.org from your browser.
+ Instead, all requests are proxied through our own backend servers. When you use the page, only the necessary parameters are passed securely on the server side:
+ from (source language), to (target language), and text (the content you entered).
- We rely on the community-run - SimplyTranslate service (a privacy-friendly - translation front-end). SimplyTranslate is a free software project: you can see the - source code and its - legal notice. - Our backend integration is handled in - - Poke’s server code - . + We rely on the community-run SimplyTranslate service (a privacy-friendly translation front-end). + SimplyTranslate is a free software project: you can see the + source code and its + legal notice.
API Logs Policy
-- When you request any resource from the Poke API (for example: thumbnails, API endpoint) information about the request may be logged. -
-Information logged per request
-- The information recorded for each API or resource request is strictly limited to the following items — and nothing else: -
--
-
- the time the request was made -
- the status code of the response -
- the method of the request -
- the requested URL -
- how long it took to complete the request -
- No identifying information is logged, such as the visitor’s cookie, user-agent, or IP address. -
-API Logs Policy
++ When you request any resource from the Poke API (for example: thumbnails, API endpoint) information about the request may be logged for operational health. +
+Information logged per request
++ The information recorded for each API or resource request is strictly limited to the following items — and nothing else: +
+-
+
- the time the request was made +
- the status code of the response +
- the method of the request +
- the requested URL +
- how long it took to complete the request +
+ No identifying information is logged in API logs, such as the visitor’s cookie or IP address.
+ (The /api/stats feature is separate and only stores anonymous aggregates listed above.)
+
Example log lines
-++- -Example log lines
+2019-01-19 16:37:47 +00:00 200 GET /api/v1/comments/xrlETJYzH-c?format=html&hl=en-US 1345.88ms 2019-01-19 16:37:53 +00:00 200 GET /vi/r5P-f5arPXE/maxres.jpg 1085.41ms 2019-01-19 16:37:54 +00:00 200 GET /watch 7.04ms --- This website does not store the visitor’s user-agent or IP address and does not use fingerprinting, advertisements, or tracking of any form. -
-
+ This website does not use fingerprinting, advertisements, or tracking of any form. +
+Legal Bases for Processing (GDPR / EU Law)
-- The Poke Project and its primary instance (poketube.fun) operate under the jurisdiction of the - European Union and comply with the principles of the - General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). - The project’s hosting structure is based in Germany, where data protection is taken seriously. -
--
-
- - Legitimate interest: Operating the Poke service safely and efficiently while collecting no personal data whatsoever. - -
- - Consent: If one day we add an optional feature that needs personal information, you’ll be clearly asked — not tricked — before it’s ever processed. - Currently, no such data collection exists. - -
- - Legal obligation: Even if an authority asks for user data, there’s nothing to hand over. - We don’t store IPs, cookies, or user identities — so there’s nothing to surrender under German or EU law. - -
- This section is here for compliance transparency only — Poke simply doesn’t process or retain personal data in the first place. -
-Your Privacy Rights
-- Because Poke doesn’t collect or store personal info, there’s really nothing about you that we can give, sell, or lose. - You won’t need to ask for “export my data” or “delete my profile” — we just don’t have any of it. -
-- Poke accounts don’t require your name, email, or any identifying detail — you literally can’t add them even if you tried. -
-- But outside Poke, you *do* have rights and tools to protect your privacy. Here are a few ideas (because yes, we want you safe): -
--
-
- - Use a privacy-respecting search engine — e.g. DuckDuckGo — so your queries aren’t logged everywhere. - -
- - Run browser extensions that block trackers, fingerprinting, and sketchy scripts. - -
- - Use HTTPS whenever possible, avoid sketchy public WiFi, and keep your OS/browser updated. - -
- - Check device permissions (camera, mic, location) and revoke ones you don’t use. - -
- - Use a VPN or encrypted connections when youre on public or untrusted networks — - we recommend Mullvad VPN, - a privacy-respecting provider that doesnt require personal info or keep logs. - -
- - Opt out of analytics/tracking — for example, install the - Google Analytics opt-out add-on. - -
- - Use a content blocker like uBlock Origin — its free software and amazing at killing ads and trackers. - -
- - Try Privacy Badger (by EFF) — it automatically spots and blocks trackers that dont respect your privacy. - -
- - Consider Ghostery — another good tracker-blocker that shows whos trying to spy on you. - -
- - Use browsers built around privacy — Firefox (and forks) is a strong pick. - Also, Firefox Focus for mobile blocks trackers by default. - -
- - Explore privacy tool directories like PrivacyTools.io — they list secure, community-vetted apps and services. - -
- These steps won’t make u invisible, but they shift the balance in ur favor. You deserve control over ur own data — always. -
-Legal Bases for Processing (GDPR / EU Law)
++ The Poke Project and its primary instance (poketube.fun) operate under the jurisdiction of the + European Union and comply with the principles of the + General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). +
+-
+
- Legitimate interest: Operating the Poke service safely and efficiently while collecting no personal data. +
- Consent: If one day we add an optional feature that needs personal information, you’ll be clearly asked before it’s processed. +
- Legal obligation: Even if an authority asks for user data, there’s no personal data to hand over. + We don’t store IPs, cookies, or identities. +
+ This section is here for compliance transparency only — Poke simply doesn’t process or retain personal data in the first place. +
+Your Privacy Rights
++ Because Poke doesn’t collect or store personal info, there’s really nothing about you that we can give, sell, or lose. + You won’t need to ask for “export my data” or “delete my profile” — we just don’t have any of it. +
++ Poke accounts don’t require your name, email, or any identifying detail — you literally can’t add them even if you tried. +
++ But outside Poke, you do have rights and tools to protect your privacy. Here are a few ideas: +
+-
+
- Use a privacy-respecting search engine — e.g. DuckDuckGo. +
- Run browser extensions that block trackers, fingerprinting, and sketchy scripts. +
- Use HTTPS whenever possible, avoid sketchy public Wi-Fi, and keep your OS/browser updated. +
- Check device permissions (camera, mic, location) and revoke ones you don’t use. +
- Use a VPN on public or untrusted networks — try Mullvad VPN. +
- Use a content blocker like uBlock Origin. +
- Try Privacy Badger (EFF). +
- Use browsers built around privacy — Firefox (and forks), + or Firefox Focus for mobile. +
- Explore privacy tool directories like PrivacyTools.io. +
Data Retention
-
-
- Server logs: No personal identifiers on our main instance. -
- Telemetry/analytics: Not enabled here. +
- Server logs: minimal operational logs (no personal data) kept for the shortest technically feasible duration. +
- Anonymous usage stats: counts are stored locally on this server; admins may reset or disable at any time.
JavaScript & No-JS
- JavaScript is optional on Poke’s websites. Core features—including search—work without JavaScript. + JavaScript is optional on Poke’s websites. Core features — including search — work without JavaScript.
Self-Hosting
- Poke is free software under the GNU GPL v3.0 or later. you can self-host it yourself! see here + Poke is free software under the GNU GPL v3.0 or later. You can self-host it yourself! + See here.
Changes to this Policy
- If we ever change how privacy works here, we’ll update the date at the top and announce major changes. Spoiler: changes would not include adding two bananas. this isnt minions LOL :3 + If we ever change how privacy works here, we’ll update the date at the top and announce major changes. Spoiler: changes would not include adding two bananas. this isn’t minions LOL :3